Testing Web Security: Assessing the Security of Web Sites and Applications (網站安全測試：評估網站與應用程式的安全性)

* Covers security basics and guides reader through the process of testing a Web site.
* Explains how to analyze results and design specialized follow-up tests that focus on potential security gaps.
* Teaches the process of discovery, scanning, analyzing, verifying results of specialized tests, and fixing vulnerabilities.

Table of Contents

Acknowledgments.

Foreword.

Preface.

Part One An Introduction to the Book.

Chapter 1 Introduction.  

Chapter 2 Test Planning.

Chapter 3 Network Security.

Chapter 4 System Software Security.

Chapter 5 Client-Side Application Security.  

Chapter 6 Server-Side Application Security.

Chapter 7 Sneak Attacks: Guarding against the Less-Thought-of Security Threats.

Chapter 8 Intruder Confusion, Detection, and Response.

Chapter 9 Assessment and Penetration Options.

Chapter 10 Risk Analysis.

Appendix A An Overview of Network Protocols, Addresses, and Devices.

Appendix B SANS Institute Top 20 Critical Internet Security Vulnerabilities.

Appendix C Test-Deliverable Templates.