Ask HN: Which are the best books for security conscious full stack web devs?

6 points by rreyes1979 10y ago ↗ HN

So many different things that can go wrong. So many information in different places. Any really good books or sites for security conscious full stack web developers? Hopefully, easy to read :)

4 comments

[ 2.9 ms ] story [ 19.7 ms ] thread

ratchetratchet 10y ago ↗

Web Application Hackers Handbook https://www.amazon.co.uk/Web-Application-Hackers-Handbook-Ex...

twunde 10y ago ↗

I'll second this. This book hits upon most common security vectors. It's amazing how few developers know what csrf is and how to defend against it even now. If you're not ready to invest money yet, check out the owasp top 10 and make sure you know how to defend against them in your preferred language/framework.

J-dawg 10y ago ↗

Troy Hunt's Pluralsight course seems to come highly recommended [0]. I haven't got around to doing it myself yet, but it's on my list!

[0] https://www.pluralsight.com/courses/hack-yourself-first

CiPHPerCoder 10y ago ↗

https://github.com/paragonie/awesome-appsec

We've been trying to maintain an up-to-date list.