A real deep dive into WebAPI and Security. This book is highly technical and is a must read for advanced developers
598356
As many of the Pro Series Books are highly technical and complex, this book is no different. I do recommend this book to anyone working with the MVC WebAPI. Unlike so many of the "other" books, this one dives in deep and sometimes that's exactly what you need. Recommended for Advanced developers. I would include intermediate developers in my recommendation if they want to advanced into the realm of an advanced developer. I found the book a bit pricey but as with so many things, if it saves time then it saves money and this book is no exception.
4449255
This is a great book - by far the best security design book for Java and J2EE (including Java SE 6 and Java EE 5) I have read to date. When I first heard about my coworkers talking about this book, I thought "oh great, another J2EE book!" Much to my surprise, this book is not just a how-to security API or patterns recipe book but much more than that - I see it as a collection of valuable suggestions and examples on how to choose security mechanisms and use them in J2EE applications and web services. Moreover, it tells you what the bestpractices, pitfalls and tradeoffs are for each design pattern option you take. Particularly, You will find this book as an ideal companion for CORE J2EE PATTERNS - Deepak Alur et al, which is my favorite for designing J2EE applications.

This book is as close to size of a pillow and I do understand why the authors gave only code snippets for selected examples instead of full implementation. The case study is just right, it discusses the scenario and how to incorporate the patterns right in to the application design..which is just right for a Java developer who is involved with Java enterprise applications and web services. The best practices and security checklist detailed in this book - helps a lot during development and when you want to deploy a J2EE application/web service in production.

Having said that, I prefer this book as a must-have for any serious Java developer/designer/architect who wants to build Security from understanding basics of WHAT and know WHY you should architect your J2EE system in a particular way using best practices (a long list) and not just HOW. Ultimately you will find this book as an onestop reference for building security in J2EE applications and web services.
1908886
Nice book that provide a high level overview of the basic concepts behind blockchain and public ledger technology. This book talk about all that you have to think about the historical backdrop of blockchain, the variables that make it really extraordinary and how it confronts more conventional sorts of databases. The most important fact that I have learn in this book is that blockchain is a way of revolutionizing business transactions. Thanks to the author for creating an amazing book. I'd definitely recommend this book.
3595427
This book is the most important for those who want to enter the world of enterprise web integration.
I started learning from this book and other IBM Visual Age redbooks about 2 years ago. Although I wasn't new to java programming back then, but I still needed this book to complete AS/400 to web integration project. This book helped me understand the details of AS/400 toolbox classes and how to effectively use these classes. It gives in depth information about AS/400 Integrated File System(IFS), Qsh interpreter(AS/400 unix like environment). There are ample examples in the book about invoking RPG programs from java programs. It also explains subfile and other dds specific classes from Toolbox.
In a nutshell this book ushered me in the world of enterprise integration with java programming.
2913319
This is a complete and very interesting book which you can learn from the basics to the advance how to impletent a complete networking security system. at the beginning it goes explaining the theory since the main concept very detail to the configuration of the system. I could I haven't read a book like this before.

This comprehensive guide will help you to choose the right practical option and make strategic decisions about the OpenStack cloud environment to fit your infrastructure in production.

I really recommend this book because it has all the necessary and covers all the requirements that I have in my job.

Wrote by Ruben Oliva Ramos.
14729
More than a year passed since i reviewed this book and still it remains 5 stars.
It is kind of unique book which gives not just authentication, network security or protocols, but the security of application-server based solution.
It is a reality that modern enterprise application runs in a sort of application server - be it .NET, J2EE or CORBA-based. It implies quite different approach to the security aspects, comparing to stand-alone application. And this book completely covers this aspect. It contains little source code, but in the security world the less you code the more you secure.
One of minus is lack of .NET security and integration with J2EE security... may be this will be next book?
I would recommend this book to software architects, project managers and professionals working on enterprise systems integration.
3722618
Too many books talk about how to secure a network, and discuss network-based attacks, but this book is different; it covers how to design, build and test the code at the end of the pipe - the application software.
The book is complete in its explanation of how to make sure your application code, be it web-based or otherwise, is secured from attack.
I learned a great deal from this book, and, based on code and design reviews of my company's code, the authors obviously know what they are talking about - as we made a lot of fixes, and added many new security test cases to our test suites.
Simply put, we never knew we had problems, until we read this book, now it's mandatory reading for all our software engineers.
4777134
The book provides systematic coverage of browser security. The first 6 pages of chapter 1 provide brilliant insight into why formal security models, risk management and taxonomies fail to deliver promised security improvements to organizations that embrace them. I used to explain the same with a lot of hand weaving, Zalewski's approach and insight are far superior.

Make no mistake, the book is focused on the browser and related technologies rather than the theory of security. The same tremendous insight, that made me nod with appreciation and wish that I had the book 5 years ago while working on security policies, illuminates browser concepts like in-browser content separation, scripting, and much more.

I appreciate the authors treatment of each of the concepts in the context of the browser as a complex and still evolving technology, with it's own history, standards, market requirements and politics.
2135530
As someone who is not a social engineer, I have always found it fascinating how some of the most sensitive corporate information can be obtained by a complete stranger. Chris takes an in-depth but easy to read approach in explaining not only different attack techniques but also the psychology and physiology involved. From Neuro-Linguistic Programming to Microexpressions to the Human Buffer Overflow, this book delves deeply into not only the results that can be obtained through social engineering attacks but also WHY they are effective and most importantly for defenders, what you can do to help mitigate the risks to your organization.
Social Engineering: The Art of Human Hacking is an excellent read and is very easy to digest. The writing is of excellent quality and Chris Hadnagy makes it clear that he is an authority on the subject of social engineering but doesn't suffer from "knowitallism" like other authors on this subject. This is a book that should be read by both auditors and those who have information to protect. Highly Recommended.
821048
Doug Lea does an excellent work.
On the one hand, he does much more than cover the API. He teaches you to *think* & understand multithreades. Example: he doesn't just state the java API won't let you modify a datastructure while iterating on it. He goes further to explain *how* java prevents this, and then details several methods to work around it. This particular example has greatly helped me with a project I'm on.
On the other hand, I found the explanations clear and easy to follow. Great book...
2154431
I had the priveledge of technically reviewing this book.  The authors are a group of WebSphere Gurus.  The book covers both J2EE and Web Services.  Not only does it explain the technologies well, they use real world examples that any developer can reproduce.  They also expose the power of WebSphere Studio.  Beginners and seasoned developers will gain from this knowledge from this book.
4646354
'Building Scalable Web Sites: Building, Scaling, and Optimizing the Next Generation of Web Applications' by Cal Henderson is a fantastic book for examining the important need of designing a web site that is adaptable for the future.  At my current place of employment we have had to deal with the issues/problems addressed in this book for years now, and having a guide like this would have probably only made things easier.

With any web-based company and relating product, there will eventually be a time that comes when the current architecture just no longer does the job.  When that time arrives, the process of addressing storage/memory/code problems can be very costly, or it can be dealt with at a much earlier point in time.  This book won't do the work for you but it will help point out the problems that can result sooner instead of later.

Chapter Listing

01. Intro

02. Web Application Architecture

03. Development Environments

04. Localization & Unicode

05. Data Integrity & Security

06. Email

07. Remote Services

08. Bottlenecks

09. Scaling Web Applications

10. Statistics, Monitoring, Alerting

11. APIs

Another reviewer is correct in that the gems in this books are chapters 8-10.  If you read nothing else in this text, focus on these 3 gems and you will have gotten your money's worth.  For any IT individual or engineer that is in charge or the overall design of your web application/site, read this wonderful book and improve the future of your web presence!!!

***** HIGHLY RECOMMENDED
3126846
Excellent book.  Relevant, concise and up to date information.
This one is very well organized, and rich in meaningful IT Security knowledge from experts in academia and industry.  It's very difficult to cover this very complex subject in a single book, hence the Syngress series seems to have split several topic areas across 3 books by Vacca.  This Network and System Security does a great job of describing each aspect of systems susceptibility functional areas, including Wireless and RFID.  Has direct applicability to my professional engineering job.  Very valuable and helpful.
282268
I read through this book at more of an advanced developer level, so I'm going to treat it from that level.
The chapter on XQuery was great; it answered many of my questions concisely.  There is very little information on the web about XQuery outside the W3.org site, so I was surprised to find such high quality information in a book.
XPath is also a newer API that is covered well in this book, giving you enough information to get your project going.
If you're planning to do any kind of development with XML coming in or going out of a relational database, this is an excellent book to buy. I also recommend Professional XML from Wrox and O'Reilly's XML in a nutshell.
4766436
This book is so much more than a technical reference for Ajaxian techniques. It will help you understand how the whole Ajax revolution came about, and where it's going. After providing a foundation of Ajax background, the authors quickly jump in to the mother of all Ajax applications: Google Maps. Not only do they describe what made Google Maps so important, they discuss in detail how the UI side can be implemented.  And the most exciting thing? After reading it, you'll feel like you could go out and create that kind of UI. It's very empowering!

After the initial excitement of understanding the techniques used in Google Maps, the authors show you a very simple customer entry form and walk you through the process of implementing an Ajax lookup to populate city and state based on zipcode. Then, after teaching the reader how to write the Ajax code from scratch, they discussed Ajax frameworks and walked the reader through implementing the same functionality using the Dojo framework. I thought this progression was very effective. It really showed off the value of learning these frameworks rather than handcoding everything.

There was plenty of great discussions of UI possibilities, validation techniques, and other things Ajax can help us with. Not only did the Authors do a great job of teaching the reader what to do, they also invested significant time helping the reader avoid common pitfalls.

The book covers so much more: debugging, graceful degradation. JSON, server-side frameworks and Ajax with various server platforms. It finishes with a nice discussion of the future of Ajax. I plan to re-read this book and share it with my colleagues. The authors really did a great job putting this book together. Not only is this a valuable reference, it's also a great cover-to-cover read.
3472394
Writing a book like this is always going to be a difficult task in an up and coming technology. This book handles it exceptionally well. Although being written in 2003 it manages to cover core web service security issues such as WS-Security, SAML and two options of identification softwre such as Liberty Alliance and the Microsoft .NET passport. For once it is refreshing to read a book that is concerned more with security for you and not trying to evangelise something down your neck. It introduces a good range of security issues that approach different aspects of web services security. This was a great start for me to start learning about web services security and the approaches to implementing it. So its a must read for any beginner in the subject.
3673221
Overall I thought this was a great book.  The authors covered a much broader range of MVC and how to interact with it from many angles - in a sort of holistic approach - moreso than what I expected. The range of topics included an introductory to MVC in the early chapters;  later covered how several common libraries and frameworks interact with MVC; the ins and outs of using existing ASP.NET features; and even diving into security principles such as cross-site scripting.  I appreciated the chapters on testing that covered test driven development as well as automated testing - and was surprised that they threw in a jQuery plugin example for the last chapter.  On top of all of this rich content, I appreciate the fact that the code was provided as well.  Well done guys!