Web Security: Learning HTTP Security Headers, Liran Tal, 2023

18 Lessons, 8 Quizzes, 30 Code Snippets, and 19 Illustrations to help you learn

Takeaway Skills
(+) Secure web applications using HTTP security headers
(+) Understand Content Security Policy
(+) Setup Node.js web applications securely
(+) Learn how to test and monitor for security headers and vulnerable JavaScript libraries
(+) Roadmap for future web controls

For each HTTP security header that can enhance your web application security, you'll learn what is the overall risk of not implementing it, and what does a proposed solution help with. Finally, you'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.

#book #web #AppSec

API Security in Action, Neil Madden, 2020

APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs.

API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments.

What’s inside
• Authentication
• Authorization
• Audit logging
• Rate limiting
• Encryption

#book #AppSec

Google Cloud Platform (GCP) Professional Cloud Network Engineer Certification Companion, Dario Cabianca, Apress, 2023

You will waste no time when you use this study companion. It lets you dive in and learn how GCP differs from other public cloud providers (AWS and Microsoft Azure). You will understand GCP's unique ability to allow virtual private clouds (VPCs) that span across multiple regions. You will know how to leverage GCP as a competitive advantage in the IT engineering community. Key concepts covered on the exam are called out and applied in each chapter of this book, giving you both practice and reinforcement, a far more effective learning tool than rote learning or similar approaches typically enlisted in exam preparation.
What You Will Learn:
(+) Architect and design a virtual private cloud
(+) Implement a virtual private cloud
(+) Configure network services
(+) Implement hybrid connectivity
(+) Implement network security
(+) Manage network operations
(+) Optimize network resources
#book #SecDevOps

Основы современной криптографи, Баричев С.Г., Серов Р.Е., 2006

Интересная книга по основам криптографии времен моего обучения в универе. Хоть годков и накапало, инфа в своем большинстве там актуальная и по сей день

В первой главе рассказывается история криптографии, основные понятия и определения, требования к криптосистемам, а также краткие сведения о криптоанализе. Далее рассматриваются традиционные симметричные и асимметричные криптосистемы, включая Криптосистемы Эль-Гамаля, Диффи-Хеллмана, Ривеста-Шамира-Адлемана, Меркля-Хеллмана и Хора-Ривеста, а также криптосистемы, основанные на эллиптических кривых. В последних главах рассматриваются электронные подписи и управление криптографическими ключами. В систематизированном виде рассмотрены вопросы создания симметричных и асимметричных криптографических систем защиты информации. Описаны алгоритмы электронных цифровых подписей, системы управления криптографическими ключами, имитозащита информации.

#book #crypto