Web Application Obfuscation : '-/WAFs..Evasion..Filters//alert(/Obfuscation/)-'

Heiderich, Mario/ Vela Nava, Eduardo Alberto/ Heyes, Gareth

Syngress Media,U.S.（2011/01発売）

• 製本 Paperback:紙装版/ペーパーバック版／ページ数 296 p.
• 言語 ENG
• 商品コード 9781597496049
• DDC分類 005.8

Full Description

Web applications are used every day by millions of users, which is why they are one of the most popular vectors for attackers. Obfuscation of code has allowed hackers to take one attack and create hundreds-if not millions-of variants that can evade your security measures. Web Application Obfuscation takes a look at common Web infrastructure and security controls from an attacker's perspective, allowing the reader to understand the shortcomings of their security systems. Find out how an attacker would bypass different types of security controls, how these very security controls introduce new types of vulnerabilities, and how to avoid common pitfalls in order to strengthen your defenses.

Contents

Chapter 1: Introduction
Chapter 2: HTML
Chapter 3: JavaScript and VBScript
Chapter 4: Nonalphanumeric JavaScript
Chapter 5: CSS
Chapter 6: PHP
Chapter 7: SQL
Chapter 8: Web Application Firewalls and Client-side Filters
Chapter 9: Mitigating Bypasses and Attacks
Chapter 10: Future Developments