Bulletproof SSL and TLS
Ivan Ristic is a security researcher, engineer, and author best known for his contributions to the field of web application firewalls and the development of ModSecurity, an open source web application firewall, as well as his SSL/TLS and PKI research, tools, and guides available on the SSL Labs website. He is the author of two books, Apache Security and ModSecurity Handbook, which he publishes through Feisty Duck, his own writing and publishing platform.
Bulletproof SSL and TLS is a comprehensive guide to deploying secure servers and web applications using SSL and TLS encryption. This book, written by Ivan Ristic, the popular SSL Labs web site's author, will teach you everything you need to know about protecting your systems from eavesdropping and impersonation attacks.
This book contains the ideal blend of theory, protocol detail, vulnerability and weakness information, and deployment advice to help you get the job done:
- Updates to the digital version provide comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI.
- Help IT security professionals understand the risks
- Assist system administrators in securely deploying systems.
- Assist developers in designing and implementing secure web applications.
- Practical and concise, with additional depth when specifics are required
- An overview of cryptography and the most recent TLS protocol version
- Discussion of flaws at all levels, including implementation issues, HTTP and browser issues, and protocol vulnerabilities.
- BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and Heartbleed are among the most recent attacks covered.
- Extensive deployment guidance, including advanced technologies like Strict Transport Security, Content Security Policy, and pinning
- How to use OpenSSL to generate keys and certificates, as well as to set up and run a private certification authority
- A tutorial on how to use OpenSSL to test servers for vulnerabilities.
- Practical server configuration advice for Apache httpd, IIS, Java, Nginx, Microsoft Windows, and Tomcat.
Author: Ivan Ristic
Link to buy: https://www.amazon.com/Bulletproof-SSL-TLS-Understanding-Applications/dp/1907117040
Ratings: 4.8 out of 5 stars (from 107 reviews)
Best Sellers Rank: #786,355 in Books
#148 in Computer Cryptography
#187 in Web Encryption
#572 in Computer Network Security
