Let me first start out by complementing the authors on the writing style. The book is actually engaging. The style is conversational and very enjoyable. It makes reading about security fun while presenting key information that every developer needs to understand.
This book makes no assumptions. It builds a framework for understanding complex and sometimes intimidating concepts so that every reader can fully grasp and own that material. Topics are then further explored with code examples as well as references to projects (i.e. OWASP HTML Validator, Shiro, etc.) so that the reader can apply what has been presented.
One of the things that I really like about the book is the presentation of anti-patterns as well as positive patterns. The authors take the time to show you both the approaches that do not work as well as ones that will! This is crucial as many of the bad approaches (anti-patterns) are solutions that are often seen in real-world situations. The authors explain why the anti-patterns are weak and then present solutions that will work!
The breadth of the topic matter is superb. The OWASP top 10 vulnerabilities are well represented in this book. However, it goes beyond the theoretical and covers topics that have an immediate impact to actual projects. I recently found myself pointing a fellow developer to the chapter on Safe File Upload and File I/O.
This book is very approachable and would be appropriate anyone in application development, project management, information security, or upper management.
This is absolutely a must-read for developers in industries that deal with personal, financial, or medical information.
I highly recommend this book!
Add Prime
to get Fast, Free delivery
Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.
Read instantly on your browser with Kindle for Web.
Using your mobile phone camera - scan the code below and download the Kindle app.
Follow the authors
Something went wrong. Please try your request again later.
Frequently bought together
This item: Iron-Clad Java: Building Secure Web Applications (Oracle Press)
$32.78
Get it as soon as Tuesday, Nov 26
In Stock
+
$58.95
Get it as soon as Tuesday, Nov 26
Only 1 left in stock - order soon.
Total price: $00
To see our price, add these items to your cart.
Choose items to buy together.
Similar items that may deliver to you quickly
Page 1 of 1 Start overPage 1 of 1
From the brand
-
As a leading global education company, our mission is to partner with educators, learners, and professionals to help them access all the value that education can offer, no matter where their starting points may be.
For over 130 years, we have never stopped innovating to meet the ever-changing needs of educators and learners around the world – and will continue to support and celebrate their efforts every step of the way.
-
Top reviews from the United States
There was a problem filtering reviews right now. Please try again later.
Reviewed in the United States on June 4, 2015
Reviewed in the United States on September 4, 2014
Reviewed in the United States on December 26, 2014
Reviewed in the United States on January 7, 2015
Reviewed in the United States on March 19, 2018
Reviewed in the United States on October 23, 2014
Reviewed in the United States on October 19, 2014
Reviewed in the United States on March 11, 2015
Top reviews from other countries
Vasile Gorcinschi
Excellent book! The only suggestions would be to include ...
Reviewed in Canada on September 5, 2016laurent marot
indispensable synthèse pour tout DEVSEC java
Reviewed in France on October 31, 2014