fullstackpython.github.com/web-application-security.html at gh-pages · david9ml/fullstackpython.github.com · GitHub

History

136 lines (129 loc) · 7.53 KB

Raw

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

<!DOCTYPE html>

<title>Full Stack Python</title>

<!--[if lt IE 9]>

<![endif]-->

<style>

html,

body {

font-size: 18px;

color: #222;

background: #fefefe;

}

body {

padding-top: 30px;

}

.footer {

padding: 20px 0 30px 0;

}

a, a:hover {border-bottom: 1px dotted; color: #444;}

a:hover {text-decoration: none; color: #000;}

.logo-title {font-size: 56px; color: #403072; padding-top: 80px;

font-family: "News Cycle", "Arial Narrow Bold", sans-serif;

font-weight: bold; line-height: 30px; margin-left: 5px;}

.logo-title a, .logo-title a:hover {color: #000; text-decoration: none;

border-bottom: none;}

.logo-title a:hover {color: gray;}

.logo-image {vertical-align: top; border: none;}

a.list-group-item.active {background: #444; border: 1px solid #222;}

a.list-group-item.active:hover {background: #444; border: 1px solid #222;}

#sidebar {margin-top: 30px;}

@media (max-width: 600px) {

.logo-header-section {

margin: 20px 32px 0 0;

}

</style>

var _gaq = _gaq || [];

_gaq.push(['_setAccount', 'UA-19910497-7']);

_gaq.push(['_trackPageview']);

(function() {

var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;

ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';

var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);

})();

</script>

</head>

<body>

</a>

<span class="logo-title"><a href="/">Full Stack Python</a></span>

</div>

</div> <div class="row">

<h1>Web Application Security</h1>

<p>Website security must be incorporated into building every level of the web

stack. However, I include a separate section here for topics that deserve

a comprehensive review such as firewalls, SSL certificates, and public key

authorization.</p>

<h2>Key Terms</h2>

<p><em>Authorization</em> - specifying access rights and permissions to server and

application resources. For example, a non-logged in user can view a landing

page but only a logged in user can access an application's "account" screen.</p>

<h3>Security Resources</h3>

<p><a class="reference external" href="http://erik.io/blog/2013/06/08/a-basic-guide-to-when-and-how-to-deploy-https/">When and How to Deploy HTTPS</a></p>

<p><a class="reference external" href="http://spenserj.com/blog/2013/07/15/securing-a-linux-server/">Securing a Linux Server</a></p>

<p><a class="reference external" href="http://arstechnica.com/security/2013/02/securing-your-website-a-tough-job-but-someones-got-to-do-it/">Securing Your Website</a></p>

<p><a class="reference external" href="http://blog.hartleybrody.com/https-certificates/">How HTTPS Secures Connections: What Every Web Dev Should Know</a></p>

<p>Open Web Application Security Project <a class="reference external" href="https://www.owasp.org/index.php/Cheat_Sheets">(OWASP) Cheat Sheets for Security</a></p>

</div>

<br/>

Next read the

<a href="/monitoring.html">monitoring</a> section.

</div>

<a href="/introduction.html" class="list-group-item ">Introduction</a>

<a href="/servers.html" class="list-group-item ">Servers</a>

<a href="/operating-systems.html" class="list-group-item ">Operating Systems</a>

<a href="/web-servers.html" class="list-group-item ">Web Servers</a>

<a href="/platform-as-a-service.html" class="list-group-item ">Platform-as-a-service</a>

<a href="/databases.html" class="list-group-item ">Databases</a>

<a href="/wsgi-servers.html" class="list-group-item ">WSGI Servers</a>

<a href="/web-frameworks.html" class="list-group-item ">Web Frameworks</a>

<a href="/task-queues.html" class="list-group-item ">Task Queues</a>

<a href="/static-content.html" class="list-group-item ">Static Content</a>

<a href="/caching.html" class="list-group-item ">Caching</a>

<a href="/web-browsers.html" class="list-group-item ">Web Browsers</a>

<a href="/web-application-security.html" class="list-group-item active">Web Application Security</a>

<a href="/monitoring.html" class="list-group-item ">Monitoring</a>

<a href="/web-analytics.html" class="list-group-item ">Web Analytics</a>

<a href="/api-integration.html" class="list-group-item ">API Integration</a>

<a href="/source-control.html" class="list-group-item ">Source Control</a>

<a href="/configuration-management.html" class="list-group-item ">Configuration Management</a>

<a href="/dependency-management.html" class="list-group-item ">Application Dependencies</a>

<a href="/no-sql-datastore.html" class="list-group-item ">NoSQL Data Stores</a>

<a href="/about-author.html" class="list-group-item ">About</a>

<a href="/change-log.html" class="list-group-item ">Change Log</a>

</div>

</div></div>

<hr/>

<a href="http://www.mattmakai.com/" class="underline">Matt Makai</a> 2014

</div>

</body>

</html>

fullstackpython.github.com/web-application-security.html at gh-pages · david9ml/fullstackpython.github.com · GitHub

Expand file tree

Breadcrumbs

web-application-security.html

Latest commit

History

Breadcrumbs

web-application-security.html

File metadata and controls