<DIV><p>Learn how to think like an attacker—and identify potential security issues in your software. In this essential guide, security testing experts offer practical, hands-on guidance and code samples to help you find, classify, and assess security bugs before your software is released.<br><br> Discover how to:<br><br></p><ul><li>Identify high-risk entry points and create test cases </li><li>Test clients and servers for malicious request/response bugs </li><li>Use black box and white box approaches to help reveal security vulnerabilities </li><li>Uncover spoofing issues, including identity and user interface spoofing </li><li>Detect bugs that can take advantage of your program’s logic, such as SQL injection </li><li>Test for XML, SOAP, and Web services vulnerabilities </li><li>Recognize information disclosure and weak permissions issues </li><li>Identify where attackers can directly manipulate memory </li><li>Test with alternate data representations to uncover canonicalization issues </li><li>Expose COM and ActiveX repurposing attacks </li></ul><br><br> PLUS—Get code samples and debugging tools on the Web</div>