The Tangled Web: A Guide to Securing Modern Web Applications

摘要

What do you get when you mix competing web browsers that implement standards, sometimes before they are finalized, with web applications that allow users to engage in e-commerce, bank online, and manage many other types of sensitive information over the internet? You get an environment ripe for exploitation by a variety of technologically savvy mischief makers and criminals. The results range from identity theft to denial of service, inconvenience to major financial loss. These conditions create an environment in which security engineers and web developers need help just to keep up.