Hacking Web Apps: Detecting and Preventing Web Application Security Problems
"Preventing and fixing vulnerabilities is what this book is really about.The truth is that it's most appropriate for anyone tasked with securing an organisation's website. However, all web developers should be made to read it, whether they consider themselves coders or designers."--Network Security Newsletter, July 2013"This book is equally valuable to technical security practitioners and less-technical security leaders alike.  I recommend anyone looking to develop their own web applications or defend against modern web application exploitation take advantage of Mike Shema's expertise on this topic."--Doug Steelman, Chief Information Security Officer, Dell SecureWorks"Hacking Web Apps by Mike Shema introduces novice security practitioners to the most threatening exploits plaguing modern web applications.  The book covers more than the raw concepts, by bringing in other vulnerabilities and showing how the various exploits relate to one another; and it does so in human readable terms."--Robert Hansen, CEO of Falling Rock Networks and SecTheory Ltd.