wood burning stoves 2.0*
The moose likes Book Reviews and the fly likes Sunshine On Java: Secure Web Applications With Code Examples Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Books » Book Reviews
Bookmark "Sunshine On Java: Secure Web Applications With Code Examples" Watch "Sunshine On Java: Secure Web Applications With Code Examples" New topic
Author

Sunshine On Java: Secure Web Applications With Code Examples

Book Review Team
Bartender

Joined: Feb 15, 2002
Posts: 926
Author/s    : Natalie "Sunny" Wear
Publisher   :
Category   : Advanced Java
Review by : Jeanne Boyarsky
Rating        : 7 horseshoes

This e-chapter (e-book) covers 3 of the OWASP top 10 (XSS, CSRF and SQL injection.) With a bonus mention of session fixation. While Amazon counts it as 29 pages, once you get past the intro we are down to 24 pages. The author covers the attacks and how to prevent them in a succinct manner.

When I first read the chapter, I was surprised to see Clickjacking wasn't included. But then I looked and it is not currently in the OWASP top 10 which was the inspiration for the book. (It is still important though; make sure to read about it on owasp.org.)

I would have liked more detail. For example show an example of CSRF along with the different ways to prevent it. It's not enough to say use a filter/token. This introduces issues of its own which need to be addressed.

As far as whether to buy the e-chapter, it is a question of whether you would pay $5 for one chapter of a book. A good chapter, but still only one chapter. I think the answer is yes in this case. But I can't bring myself to call it a book so I'm going to recommend this e-chapter to those who are unfamiliar with two or three of these attacks. If you are already familiar with them, just go on OWASP directly.

---
Disclosure: I received a copy of this book from the publisher in exchange for writing this review on behalf of CodeRanch.

More info at Amazon.com
Raghavan Muthu
Ranch Hand

Joined: Apr 20, 2006
Posts: 3344

That is a very precise review Jeanne. A good point you had made on 'clickjacking', which I came across for the first time. Reason may be due to being slightly out of touch in technical areas for sometime.

I liked the disclaimer very much


Everything has got its own deadline including one's EGO!
[CodeBarn] [Java Concepts-easily] [Corey's articles] [SCJP-SUN] [Servlet Examples] [Java Beginners FAQ] [Sun-Java Tutorials] [Java Coding Guidelines]
Jeanne Boyarsky
internet detective
Marshal

Joined: May 26, 2003
Posts: 29241
    
139

Raghavan Muthu wrote:I liked the disclaimer very much

Thanks. When the author contacted me about running a promo, I said I wanted to review the book first. Self published books vary broadly in quality so I wanted to make sure we weren't promoting something with a quality problem. And we weren't. The content was correct.


[Blog] [JavaRanch FAQ] [How To Ask Questions The Smart Way] [Book Promos]
Blogging on Certs: SCEA Part 1, Part 2 & 3, Core Spring 3, OCAJP, OCPJP beta, TOGAF part 1 and part 2
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Sunshine On Java: Secure Web Applications With Code Examples
 
Similar Threads
HTML 5 Up and Running
Java the Complete Reference, 8th Edition
Java 7 JAX-WS Web Services
Scala for the Impatient
Arduino Robotics