--- product_id: 1703969 title: "Developer's Guide to Web Application Security 1st Edition" brand: "michael cross md" price: "S/.399" currency: PEN in_stock: true reviews_count: 4 url: https://www.desertcart.pe/products/1703969-developers-guide-to-web-application-security-1st-edition store_origin: PE region: Peru --- # Developer's Guide to Web Application Security 1st Edition **Brand:** michael cross md **Price:** S/.399 **Availability:** ✅ In Stock ## Quick Answers - **What is this?** Developer's Guide to Web Application Security 1st Edition by michael cross md - **How much does it cost?** S/.399 with free shipping - **Is it available?** Yes, in stock and ready to ship - **Where can I buy it?** [www.desertcart.pe](https://www.desertcart.pe/products/1703969-developers-guide-to-web-application-security-1st-edition) ## Best For - michael cross md enthusiasts ## Why This Product - Trusted michael cross md brand quality - Free international shipping included - Worldwide delivery with tracking - 15-day hassle-free returns ## Description Full description not available ## Images ![Developer's Guide to Web Application Security 1st Edition - Image 1](https://m.media-amazon.com/images/I/61FrrGcxpRL.jpg) ## Customer Reviews ### ⭐⭐⭐⭐⭐ Very good book of knowledge. *by L***E on September 23, 2012* This book shows you how to do many things. It walks you step by step to create many links for your own Security. For myself, the knowledge that shows you "How to create" is the best part of this book I like for the Security of my computer. ### ⭐⭐ Just not quite the book it promises to be *by J***N on June 3, 2008* More recent books on web application security are welcomed. The publication date of 2006 suggests it might fall into that category.The focus on the programmer is also welcomed. Many security books deal with threats, but the actual practice of programming to ameliorate those threats may not be readily apparent. One would like support for a programmer "security mindset" and specific strategies to implement that.The book is addressed to programmers and written in a fashion that is engaging. And, as a more general work to highlight the importance of security at the development stage, it's OK.But, there's just not much depth here for it's intended topic. And, the content appears to reflect lectures presented in the 90s. There's some significant reference to C, which is not typically used in contemporary web programming. The focus tends towards the *nix world, but again a fair amount of emphasis, as I recall, on cgi, where again, PHP is more commonly used today. References in the Microsoft world are exclusively to ASP -- a technology which was superseded in 2002 by ASP.NET.There's some appropriate programming advice here. But, it's soft rather than hard, and diffuse and general rather than focused and specific.I would rate it 3 stars for that content if it were more appropriately titled. ### ⭐⭐⭐⭐⭐ Good read for the security conscious *by A***R on March 16, 2007* When I came across this book on the O'Reilly website I was immediately interested, as web applications are becoming more and more prevalent. And other than thinking it covered methods of securing web applications I had no preconceived assumptions. My main aspiration for this book was to give me better awareness of security in the area of web applications and to provide me with some tools. After having read this book I can say that it has done both.Each of the chapters in this book seem to follow a pattern of first defining the topic, second giving real world examples, and finally providing the reader with solutions. The book begins by providing a history of the hacking methodology and defining the various types of hacking. It was interesting to learn about some of the various hacks and hackers. For example, I had no idea Steve Jobs (Apple Computers) used to be a hacker.In chapter two the author discusses what he calls a "Code Grinder", and how to not become or produce a code grinder. A code grinder is someone who works in a highly regulated environment where creativity is discouraged. I found it interesting that a code grinder environment typically produces more unsecure code then an environment that is open and promotes creativity.Chapter three discusses the risks associated with mobile code. Chapter four covers vulnerable CGI scripts and introduces the reader to some tools such as Nikto and Web Hack Control Center to scan your website to find vulnerabilities. The author goes on to discuss the issues faced by the various CGI scripting languages, and then provides an outline of rules to writing secure CGI scripts.Chapter five covers hacking techniques and tools. This section gets you into the mind of a hacker, what are their goals, how are those goals achieved and what tools do they use. In chapter six the topic is "Code Auditing and Reverse Engineering." This chapter I found exceptionally interesting and helpful. The author takes you through various types of vulnerabilities and with each weakness explains how it affects each of the more popular programming/scripting languages. And to take it a step further the author also provides the reader with the functions/methods for each programming/scripting language that are vulnerable to attack and then explains either how to use those functions securely or gives an alternative function/method that is more secure.Chapters seven through ten cover securing code in specific languages; Java, XML, ActiveX, and ColdFusion. Chapter eleven discusses developing security enabled applications using such technologies as PGP, SSL, and PKI. Finally in chapter twelve the author wraps up the book by taking the reader through creating and working with a security plan.CONCLUSION--I found this book to be interesting and a good read. I plan to make use of some of the tools it introduced in hardening applications I work with and develop. And as I mentioned before, the chapter on code auditing will be extremely useful to me in cleaning up existing apps and developing new ones. I liked this book and I would recommend it to anyone who is writing code. --- ## Why Shop on Desertcart? - 🛒 **Trusted by 1.3+ Million Shoppers** — Serving international shoppers since 2016 - 🌍 **Shop Globally** — Access 737+ million products across 21 categories - 💰 **No Hidden Fees** — All customs, duties, and taxes included in the price - 🔄 **15-Day Free Returns** — Hassle-free returns (30 days for PRO members) - 🔒 **Secure Payments** — Trusted payment options with buyer protection - ⭐ **TrustPilot Rated 4.5/5** — Based on 8,000+ happy customer reviews **Shop now:** [https://www.desertcart.pe/products/1703969-developers-guide-to-web-application-security-1st-edition](https://www.desertcart.pe/products/1703969-developers-guide-to-web-application-security-1st-edition) --- *Product available on Desertcart Peru* *Store origin: PE* *Last updated: 2026-06-04*