A short book in the series "Web Security Topics", by the well-known authors Nigel and Jenny Chapman. Written for Web developers who act as part-time sysadmins, this handy guide deals with a crucial aspect of Web security - securing the system on which your Web applications are hosted. It provides a clear, easy-to-understand introduction to securing a Web server host running a Unix-like operating system such as Ubuntu Server.This guide is not intended for developers administering Windows-based servers.The book offers a commonsense, practical approach to everyday security for busy developers who have to take responsibility for setting up and securing Web servers for small businesses and non-profit organizations which do not have critical security requirements.Based on first-hand practical experience combined with extensive computing knowledge, this book explains the important principles and processes which every developer administering a server host needs to understand. Full of down-to-earth advice, it describes how to avoid the main pitfalls and security risks when administering a server host - and explains why each step must be taken.Topics covered include the available methods for remotely administering a server and transferring files to it, systems of permissions based on user accounts, how to restrict users and processes to minimize security risks, how to prevent unwanted connections by eliminating inessential servers and setting up a firewall, and how to recover from break-ins to the server if the worst should happen.Clear key points provide useful summaries at the end of each section, and a valuable 14-page glossary of technical terms is included. FREE PDF OFFER: a mail-in form at the back of the book enables every purchaser to claim a free PDF copy from the publisher.

A Web Developer's Guide to Securing a Server

Computers & Technology

Chapman, Nigel

Chapman, Jenny

Networking & Cloud Computing

MacAvon Media

A short book in the "Web Security Topics" series, by the well-known authors Nigel and Jenny Chapman.Web applications are often entrusted with sensitive data which must be protected in transit between the Web browser and server to prevent its interception. Networks, especially wireless networks, are susceptible to eavesdropping, and precautions must be taken to ensure that it is not possible to read or interfere with data in the event of interception. Care must also be taken that data goes to its intended destination and is not waylaid en route.Written for professional and student Web developers, this little book provides a clear, non-mathematical introduction to the essentials of cryptography and to the protocols used for securing communication on the World Wide Web, specifically TLS/SSL and HTTPS. The examples focus especially on the requirements of small e-commerce sites. Short working programs written in JavaScript/Node.js are provided throughout the book and via the companion site websecuritytopics.info.Topics covered include the encryption and decryption of data, the principles underlying ciphers such as DES and AES, message authentication using SHA and HMAC, the use of OpenSSL for encryption and hash computation, public key cryptography and certificates and digital signatures. The TLS/SSL protocol is described in some detail together with its use in HTTPS, the secure version of HTTP used to safeguard sensitive Web sites.Clear key points provide useful summaries at the end of each section, and technical terms are defined in a 14-page glossary. A mail-in form at the back of the book enables every purchaser to claim a free PDF copy from the publisher.

A Web Developer's Guide to Secure Communication

A short book in the "Web Security Topics" series for Web developers, by the well-known authors Nigel and Jenny Chapman. Web applications manipulate resources in response to requests from users. It is often necessary to determine whether a requested operation should be allowed for the user who sent the request. This process of authorization - that is, deciding whether an application should be allowed to carry.out the operation which a request from a particular user or program calls for - depends on, but is separate from, the process of authentication. Authentication means determining the identity of the user or program sending the request. This is usually done by maintaining user accounts, protected by passwords, and by requiring users to log in. Written for professional and student Web developers, this book provides a clear and practical description of authentication and authorization for Web sites. Secure methods of storing users' account details are described, with special emphasis on the secure storage of passwords. The authors explain different methods of authentication, and techniques for applying authorization to requests from authenticated users. A simple application, written in JavaScript and built on the Express framework, is developed throughout the book to demonstrate the principles. The source code is provided via the companion site websecuritytopics.info. Topics covered include hashing and salting passwords for secure storage, using CAPTCHAs to prevent the creation of bogus accounts, resetting passwords, session-based authentication and attacks against sessions, HTTP authentication, OpenId, authorization based on user accounts, role-based authorization, and OAuth. Notes on relevant topics in cryptography are also included. Clear key points provide useful summaries at the end of each section, and technical terms are defined in a 16-page glossary.

Authentication and Authorization on the Web

Web Development & Design

See the best price to sell, buy or rent books by the MacAvon Media publisher. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by MacAvon Media

See the best price to sell, buy or rent books by the MacAvon Media publisher. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

A Web Developer's Guide to Securing a Server

A Web Developer's Guide to Secure Communication

Authentication and Authorization on the Web