Testing Web Security: Assessing the Security of Web Sites and Applications Steven Splaine

* Covers security basics and guides reader through the process of testing a Web site.

* Explains how to analyze results and design specialized follow-up tests that focus on potential security gaps.

* Teaches the process of discovery, scanning, analyzing, verifying results of specialized tests, and fixing vulnerabilities. Это и многое другое вы найдете в книге Testing Web Security: Assessing the Security of Web Sites and Applications (Steven Splaine)