applications

The latest Web app attacks and countermeasures from world-renowned practitioners

Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.

• Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster
• See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation
• Understand how attackers defeat commonly used Web authentication technologies
• See how real-world session attacks leak sensitive data and how to fortify your applications
• Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques
• Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments
• Safety deploy XML, social networking, cloud computing, and Web 2.0 services
• Defend against RIA, Ajax, UGC, and browser-based, client-side exploits
• Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures

You’ve run into this issue numerous times. You are developing an ASP.NET application, and you need to incorporate functionality that comes prepackaged in SharePoint. Wikis, blogs, document management, user authentication, access management—common needs across a variety of solutions. You know there is a way to integrate SharePoint's functionality within ASP.NET solutions, but you don’t know how to develop it.

Without guidance and examples, interacting with underlying SharePoint components can be challenging, and working with the different SharePoint APIs is complicated. This book introduces you to a variety of techniques to master the art of developing ASP.NET applications that are built upon a SharePoint foundation. You’ll explore integration with SharePoint components, configuration management, Code Access Security, feature packaging, proper use of SharePoint APIs, and advanced deployment techniques. Pro ASP.NET SharePoint 2010 Solutions walks you through all of the steps needed to successfully build and deploy ASP.NET solutions within the SharePoint platform.

What you’ll learn

• How to use SharePoint as a development platform
• How to build SharePoint features such as authentication, document management, and wikis and blogs into an ASP.NET application
• How to migrate an existing application from ASP.NET into SharePoint
• Understand the SharePoint / .NET / IIS implementation
• Different approaches to packaging ASP.NET within SharePoint

Who this book is for

This book is for ASP.NET developers who want to incorporate the functionality of SharePoint into their applications. Readers familiar with either ASP.NET development or with SharePoint will find valuable information which will greatly enhance their solutions and allow them to build solid, professional applications with minimal effort.

Professional Flash Mobile Development: Creating Android and iPhone Applications

Everything Flash developers need to know to create native Android and iPhone apps

This Wrox guide shows Flash developers how to create native applications for Android and iPhone mobile devices using Flash. Packed with practical examples, it shows how to build a variety of apps and integrate them with core mobile services such as Accelerometer, GPS, Photo Library,and more.

• Offers Flash developers the tools to create apps for the Android and iPhone mobile devices
• Shows how to design a user interface optimized for Android and iOS and offers plenty of examples for building native Android and iPhone apps with Flash, migrating existing Flash media, testing and debugging applications, and more
• Helps you understand ways to work with files on Android and iOS

Professional Flash Mobile Development: Creating Android and iPhone Applications answers the demand for Flash-capable Android and iPhone apps.

The first book to completely demystify leading-edge component development with the Adobe Flex 3 platform - How to build components for Flex and AIR applications using ActionScript 3.0 and Adobe's powerful MXML user interface markup language - Covers expert techniques most books ignore, including component metadata, error handling, documentation, and creating Flex components in Flash using the Flex Component Kit - By Mike Jones, world-renowned Flex development consultant and speaker Summary Adobe Flex 3 offers a powerful new framework that web developers can use to quickly produce richer, more immersive, higher-value solutions. To help developers build the most powerful next-generation web applications, Adobe structured the Flex framework around components, and allowed developers to extend Flex's capabilities with their own components. However, few Flex developers know how to create these custom components. Developing Flex Components is the first book to completely demystify that process. Renowned Flex developer and speaker Mike Jones begins by presenting a quick overview of Flex and Flex Builder aimed at ActionScript 3.0 Flash developers. Jones explains the anatomy of a Flex component, including both visual and non-visual components, and introduces the components that come with the Flex framework. Next, one step at a time, he walks through building new Flex components that leverage the platform's powerful capabilities and can be incorporated into both Flex and AIR applications. Jones covers topics that are rarely addressed in Flex books, including component metadata, events and error handling, data binding, skinning, styling, and creating Flex components in Flash using the Flex Component Kit. He also presents a full chapter on writing and maintaining component documentation, as well as an appendix of additional resources for Flex component developers.

With Advanced iOS 4 Programming, developers have the expert guidance they need to create amazing applications for Apple's iPhone, iPad, and iPod touch.

Inside, veteran mobile developer Dr. Maher Ali begins with a foundation introduction to Objective C and Cocoa Touch programming, and then guides readers through building apps with Apple's iPhone SDK 4 – including coverage of the major categories of new APIs and building apps for the new Apple iPad.

This book concentrates on illustrating GUI concepts programmatically, allowing readers to fully appreciate the complete picture of iOS 4 development without relying on Interface Builder. In addition, Interface Builder is covered in several chapters.

Advanced iOS 4 Programming delves into more advanced topics going beyond the basics of iOS 4 development, providing comprehensive coverage that will help you get your apps to the App Store quicker.

Key features include:

• Objective-C programming language and runtime
• Interface Builder
• Building advanced mobile user interfaces
• Collections
• Cocoa Touch
• Core Animation and Quartz 2D
• Model-view-controller (MVC) designs
• Developing for the iPad
• Grand Central Dispatch
• Parsing XML documents using SAX, DOM, and TouchXML
• Working with the Map Kit API
• Remote and Local Push Notification
• Blocks (closures) in Objective-C
• Building advanced location-based applications
• Developing database applications using the SQLite engine
• GameKit framework

In Detail

Using Facebook Applications, developers can add custom features to one of the most popular websites in the world. Facebook is the biggest social network among college students, and is gaining ground among professionals too. Facebook applications enable you to add new ways for users to interact with each other using Facebook.

Facebook applications are written in a server-side language, and hosted on the application developer's own server. They interface with Facebook, so that they appear to users to be part of Facebook itself.

This book shows PHP developers how to quickly get started building powerful Facebook applications, how to work with data stored in Facebook, including photos, and how to handle multimedia and other custom data within Facebook applications.

The book covers how to send notifications and invitations from within an application, update a user's profile, create application control panels for users, and much more.

What you will learn from this book?

• Learn Facebook application development through step-by-step examples.
• Build data-driven Facebook applications, work with friends lists, photo galleries, multimedia, and more.
• Work with Facebook's security model to produce applications that are safe and functional.
• Communicate with users through newsfeeds, notifications, invitations, and messages.
• Learn the Facebook PHP API, and the various markup languages you'll need to build Facebook applications: Mock Ajax, FBML, FBJS (a variant of JavaScript especially for Facebook), and FQL.

Approach

This book builds on your knowledge as a PHP developer to provide a fast-paced, step-by-step tutorial in building Facebook applications. The book is packed with example code and demo applications, so that you can see techniques in action. Along the way we provide quick references to the most important aspects of the API, so you can refer back as you develop your own applications with the book.

Who this book is written for?

This book is for PHP5 developers who want to create custom Facebook applications. It assumes no knowledge of the Facebook API or Platform, but does assume that you are a Facebook user.

In Detail

Using Facebook Applications, developers can add custom features to one of the most popular websites in the world. Facebook is the biggest social network among college students, and is gaining ground among professionals too. Facebook applications enable you to add new ways for users to interact with each other using Facebook.

Facebook applications are written in a server-side language, and hosted on the application developer's own server. They interface with Facebook, so that they appear to users to be part of Facebook itself.

This book shows PHP developers how to quickly get started building powerful Facebook applications, how to work with data stored in Facebook, including photos, and how to handle multimedia and other custom data within Facebook applications.

The book covers how to send notifications and invitations from within an application, update a user's profile, create application control panels for users, and much more.

What you will learn from this book?

• Learn Facebook application development through step-by-step examples.
• Build data-driven Facebook applications, work with friends lists, photo galleries, multimedia, and more.
• Work with Facebook's security model to produce applications that are safe and functional.
• Communicate with users through newsfeeds, notifications, invitations, and messages.
• Learn the Facebook PHP API, and the various markup languages you'll need to build Facebook applications: Mock Ajax, FBML, FBJS (a variant of JavaScript especially for Facebook), and FQL.

Approach

This book builds on your knowledge as a PHP developer to provide a fast-paced, step-by-step tutorial in building Facebook applications. The book is packed with example code and demo applications, so that you can see techniques in action. Along the way we provide quick references to the most important aspects of the API, so you can refer back as you develop your own applications with the book.

Who this book is written for?

This book is for PHP5 developers who want to create custom Facebook applications. It assumes no knowledge of the Facebook API or Platform, but does assume that you are a Facebook user.

With Advanced iOS 4 Programming, developers have the expert guidance they need to create amazing applications for Apple's iPhone, iPad, and iPod touch.

Inside, veteran mobile developer Dr. Maher Ali begins with a foundation introduction to Objective C and Cocoa Touch programming, and then guides readers through building apps with Apple's iPhone SDK 4 – including coverage of the major categories of new APIs and building apps for the new Apple iPad.

This book concentrates on illustrating GUI concepts programmatically, allowing readers to fully appreciate the complete picture of iOS 4 development without relying on Interface Builder. In addition, Interface Builder is covered in several chapters.

Advanced iOS 4 Programming delves into more advanced topics going beyond the basics of iOS 4 development, providing comprehensive coverage that will help you get your apps to the App Store quicker.

Key features include:

• Objective-C programming language and runtime
• Interface Builder
• Building advanced mobile user interfaces
• Collections
• Cocoa Touch
• Core Animation and Quartz 2D
• Model-view-controller (MVC) designs
• Developing for the iPad
• Grand Central Dispatch
• Parsing XML documents using SAX, DOM, and TouchXML
• Working with the Map Kit API
• Remote and Local Push Notification
• Blocks (closures) in Objective-C
• Building advanced location-based applications
• Developing database applications using the SQLite engine
• GameKit framework