5 ms·
Ask HN: the best(s) web security book for web developers
What are, in your opinions, the best web security books available for a web developer today?
The kind you would have on your desk along your Rails/Django/JS classics when building a web app with your team?
- jyu 13y agoI'd also like to know Security 101 for web developers. In a recent appsec thread, there were two books that a lot of people recommended: http://www.amazon.com/The-Tangled-Web-Securing-Applications/dp/1593273886 http://www.amazon.com/The-Tangled-Web-Securing-Applications/... http://www.amazon.com/The-Web-Application-Hackers-Handbook/dp/1118026470 http://www.amazon.com/The-Web-Application-Hackers-Handbook/d... https://news.ycombinator.com/item?id=5862102 https://news.ycombinator.com/item?id=5862102
- LarryMade2 13y agoI think a lot of those security checklist things are a good guidemap of what you need to do. Then add to that a security book specific to your application's programming language(s) Heres one, there are plenty more: http://www.techrepublic.com/blog/security/ensure-basic-web-site-security-with-this-checklist/424 http://www.techrepublic.com/blog/security/ensure-basic-web-s...
- tptacek 13y agoWe're a software security firm, and when promising candidates reach out to us and tell us they're worried that they don't have a lot of exposure to web app security, we buy them _The Web App Hackers Handbook_ (I invariably apologize for the stupid title) and _The Tangled Web_.
- dheavy 13y agoThanks for your input guys, it's very valuable!