This practical guide provides both offensive and defensive security concepts that software engineers can easily learn and apply.

HTML5 -- HTML injection & cross-site scripting (XSS) -- Cross-site request forgery (CSRF) -- SQL injection & data store manipulation -- Breaking authentication schemes -- Abusing design deficiencies -- Leveraging platform weaknesses -- ...

This book is for everyone concerned with building more secure software: developers, security engineers, analysts, and testers. The First Expert Guide to Static Analysis for Software Security!

This is the first place to go for Application Security innovation - INCLUDED are numerous real-world Application Security blueprints, presentations and templates ready for you to access and use.

This expert guide describes a systematic, task-based approach to security that can be applied to both new and existing applications.