Read Books Online and Download eBooks, EPub, PDF, Mobi, Kindle, Text Full Free.
Running Hashicorp Vault In Production
Download Running Hashicorp Vault In Production full books in PDF, epub, and Kindle. Read online Running Hashicorp Vault In Production ebook anywhere anytime directly on your device. Fast Download speed and no annoying ads. We cannot guarantee that every ebooks is available!
Book Synopsis Running HashiCorp Vault in Production by : Bryan Krausen
Download or read book Running HashiCorp Vault in Production written by Bryan Krausen and published by . This book was released on 2020-10-24 with total page 276 pages. Available in PDF, EPUB and Kindle. Book excerpt: Flexibility and security. Two characteristics that cannot be compromised in the age of multi-cloud and DevOps, yet most secrets management tools were designed around the idea that both cannot be achieved together. Enter HashiCorp Vault, built around the philosophy that securing secrets is more effective when the interaction of a secrets management service aligns with other DevOps tools available today. Vault has quickly become the de-facto solution in secrets management over recent years, finding its way into many Global 2000 companies. This book will cover multiple aspects of Vault, from planning the service, architectural design, and deployment of Vault, to managing the service once it is up and running. With a combined 40 years of experience working in technology and more than three years working specifically with Vault, Bryan and Dan walk users through the process of designing and building a production-ready Vault service.
Book Synopsis Terraform: Up & Running by : Yevgeniy Brikman
Download or read book Terraform: Up & Running written by Yevgeniy Brikman and published by "O'Reilly Media, Inc.". This book was released on 2019-09-06 with total page 417 pages. Available in PDF, EPUB and Kindle. Book excerpt: Terraform has become a key player in the DevOps world for defining, launching, and managing infrastructure as code (IaC) across a variety of cloud and virtualization platforms, including AWS, Google Cloud, Azure, and more. This hands-on second edition, expanded and thoroughly updated for Terraform version 0.12 and beyond, shows you the fastest way to get up and running. Gruntwork cofounder Yevgeniy (Jim) Brikman walks you through code examples that demonstrate Terraform’s simple, declarative programming language for deploying and managing infrastructure with a few commands. Veteran sysadmins, DevOps engineers, and novice developers will quickly go from Terraform basics to running a full stack that can support a massive amount of traffic and a large team of developers. Explore changes from Terraform 0.9 through 0.12, including backends, workspaces, and first-class expressions Learn how to write production-grade Terraform modules Dive into manual and automated testing for Terraform code Compare Terraform to Chef, Puppet, Ansible, CloudFormation, and Salt Stack Deploy server clusters, load balancers, and databases Use Terraform to manage the state of your infrastructure Create reusable infrastructure with Terraform modules Use advanced Terraform syntax to achieve zero-downtime deployment
Book Synopsis Infrastructure-as-Code Automation Using Terraform, Packer, Vault, Nomad and Consul by : Navin Sabharwal
Download or read book Infrastructure-as-Code Automation Using Terraform, Packer, Vault, Nomad and Consul written by Navin Sabharwal and published by Apress. This book was released on 2021-08-24 with total page 243 pages. Available in PDF, EPUB and Kindle. Book excerpt: Discover the methodologies and best practices for getting started with HashiCorp tools, including Terraform, Vault, and Packer. The book begins with an introduction to the infrastructure-as-code concept while establishing the need for automation and management technologies. You’ll go over hands-on deployment, configuration, and best practices for Terraform, Packer, Vault, Nomad, and Consul. You’ll then delve deeper into developing automation code using Terraform for automating AWS/Azure/GCP public cloud tasks; advanced topics include leveraging Vault for secrets management and Packer for image management. Along the way you will also look at Nomad and Consul for managing application orchestration along with network interconnectivity. In each chapter you will cover automated infrastructure and application deployment on the VM/container base ecosystem. The book provides sample code and best-practice guidance for developers and architects to look at infrastructure-as-code adoption from a holistic viewpoint. All the code presented in the book is available in the form of scripts, which allow you to try out the examples and extend them in interesting ways. What You Will Learn Get an overview of the architecture of Terraform, Vault, Packer, Nomad, and Consul Follow hands-on steps for enabling Terraform, Vault, Packer, Nomad, and Consul Automate various services on the public cloud, including AWS, Azure, and GCP Who This Book Is For Developers, architects, and administrators who want to learn about infrastructure-as-code automation.
Book Synopsis Kubernetes - A Complete DevOps Cookbook by : Murat Karslioglu
Download or read book Kubernetes - A Complete DevOps Cookbook written by Murat Karslioglu and published by Packt Publishing Ltd. This book was released on 2020-03-13 with total page 576 pages. Available in PDF, EPUB and Kindle. Book excerpt: Leverage Kubernetes and container architecture to successfully run production-ready workloads Key FeaturesImplement Kubernetes to orchestrate and scale applications proficientlyLeverage the latest features of Kubernetes to resolve common as well as complex problems in a cloud-native environmentGain hands-on experience in securing, monitoring, and troubleshooting your applicationBook Description Kubernetes is a popular open source orchestration platform for managing containers in a cluster environment. With this Kubernetes cookbook, you’ll learn how to implement Kubernetes using a recipe-based approach. The book will prepare you to create highly available Kubernetes clusters on multiple clouds such as Amazon Web Services (AWS), Google Cloud Platform (GCP), Azure, Alibaba, and on-premises data centers. Starting with recipes for installing and configuring Kubernetes instances, you’ll discover how to work with Kubernetes clients, services, and key metadata. You’ll then learn how to build continuous integration/continuous delivery (CI/CD) pipelines for your applications, and understand various methods to manage containers. As you advance, you’ll delve into Kubernetes' integration with Docker and Jenkins, and even perform a batch process and configure data volumes. You’ll get to grips with methods for scaling, security, monitoring, logging, and troubleshooting. Additionally, this book will take you through the latest updates in Kubernetes, including volume snapshots, creating high availability clusters with kops, running workload operators, new inclusions around kubectl and more. By the end of this book, you’ll have developed the skills required to implement Kubernetes in production and manage containers proficiently. What you will learnDeploy cloud-native applications on KubernetesAutomate testing in the DevOps workflowDiscover and troubleshoot common storage issuesDynamically scale containerized services to manage fluctuating traffic needsUnderstand how to monitor your containerized DevOps environmentBuild DevSecOps into CI/CD pipelinesWho this book is for This Kubernetes book is for developers, IT professionals, and DevOps engineers and teams who want to use Kubernetes to manage, scale, and orchestrate applications in their organization. Basic understanding of Kubernetes and containerization is necessary.
Book Synopsis Jenkins 2: Up and Running by : Brent Laster
Download or read book Jenkins 2: Up and Running written by Brent Laster and published by "O'Reilly Media, Inc.". This book was released on 2018-05-02 with total page 611 pages. Available in PDF, EPUB and Kindle. Book excerpt: Design, implement, and execute continuous delivery pipelines with a level of flexibility, control, and ease of maintenance that was not possible with Jenkins before. With this practical book, build administrators, developers, testers, and other professionals will learn how the features in Jenkins 2 let you define pipelines as code, leverage integration with other key technologies, and create automated, reliable pipelines to simplify and accelerate your DevOps environments. Author Brent Laster shows you how Jenkins 2 is significantly different from the more traditional, web-only versions of this popular open source automation platform. If you’re familiar with Jenkins and want to take advantage of the new technologies to transform your legacy pipelines or build new modern, automated continuous delivery environments, this is your book. Create continuous delivery pipelines as code with the Jenkins domain-specific language Get practical guidance on how to migrate existing jobs and pipelines Harness best practices and new methods for controlling access and security Explore the structure, implementation, and use of shared pipeline libraries Learn the differences between declarative syntax and scripted syntax Leverage new and existing project types in Jenkins Understand and use the new Blue Ocean graphical interface Take advantage of the capabilities of the underlying OS in your pipeline Integrate analysis tools, artifact management, and containers
Book Synopsis The Terraform Book by : James Turnbull
Download or read book The Terraform Book written by James Turnbull and published by James Turnbull. This book was released on 2016-12-31 with total page 332 pages. Available in PDF, EPUB and Kindle. Book excerpt: A hands-on, introductory book about managing infrastructure with Terraform. Start small and then build on what you learn to scale up to complex infrastructure. Written for both developers and sysadmins. Focuses on how to build infrastructure and applications with Terraform. The book contains: Chapter 1: An Introduction to Terraform Chapter 2: Installing Terraform Chapter 3: Building our first application Chapter 4: Provisioning and Terraform Chapter 5: Collaborating with Terraform Chapter 6: Building a multi-environment architecture Chapter 7: Infrastructure testing Updated for Terraform 0.12!
Book Synopsis Kubernetes Best Practices by : Brendan Burns
Download or read book Kubernetes Best Practices written by Brendan Burns and published by "O'Reilly Media, Inc.". This book was released on 2019-11-14 with total page 281 pages. Available in PDF, EPUB and Kindle. Book excerpt: In this practical guide, four Kubernetes professionals with deep experience in distributed systems, enterprise application development, and open source will guide you through the process of building applications with this container orchestration system. Based on the experiences of companies that are running Kubernetes in production successfully, many of the methods are also backed by concrete code examples. This book is ideal for those already familiar with basic Kubernetes concepts who want to learn common best practices. You’ll learn exactly what you need to know to build your best app with Kubernetes the first time. Set up and develop applications in Kubernetes Learn patterns for monitoring, securing your systems, and managing upgrades, rollouts, and rollbacks Understand Kubernetes networking policies and where service mesh fits in Integrate services and legacy applications and develop higher-level platforms on top of Kubernetes Run machine learning workloads in Kubernetes
Book Synopsis Terraform Cookbook by : Mikael Krief
Download or read book Terraform Cookbook written by Mikael Krief and published by Packt Publishing Ltd. This book was released on 2020-10-15 with total page 360 pages. Available in PDF, EPUB and Kindle. Book excerpt: Discover how to manage and scale your infrastructure using Infrastructure as Code (IaC) with Terraform Key Features Get up and running with the latest version of Terraform, v0.13 Design and manage infrastructure that can be shared, tested, modified, provisioned, and deployed Work through practical recipes to achieve zero-downtime deployment and scale your infrastructure effectively Book DescriptionHashiCorp Configuration Language (HCL) has changed how we define and provision a data center infrastructure with the launch of Terraform—one of the most popular and powerful products for building Infrastructure as Code. This practical guide will show you how to leverage HashiCorp's Terraform tool to manage a complex infrastructure with ease. Starting with recipes for setting up the environment, this book will gradually guide you in configuring, provisioning, collaborating, and building a multi-environment architecture. Unlike other books, you’ll also be able to explore recipes with real-world examples to provision your Azure infrastructure with Terraform. Once you’ve covered topics such as Azure Template, Azure CLI, Terraform configuration, and Terragrunt, you’ll delve into manual and automated testing with Terraform configurations. The next set of chapters will show you how to manage a balanced and efficient infrastructure and create reusable infrastructure with Terraform modules. Finally, you’ll explore the latest DevOps trends such as continuous integration and continuous delivery (CI/CD) and zero-downtime deployments. By the end of this book, you’ll have developed the skills you need to get the most value out of Terraform and manage your infrastructure effectively.What you will learn Understand how to install Terraform for local development Get to grips with writing Terraform configuration for infrastructure provisioning Use Terraform for advanced infrastructure use cases Understand how to write and use Terraform modules Discover how to use Terraform for Azure infrastructure provisioning Become well-versed in testing Terraform configuration Execute Terraform configuration in CI/CD pipelines Explore how to use Terraform Cloud Who this book is for This book is for developers, operators, and DevOps engineers looking to improve their workflow and use Infrastructure as Code. Experience with Microsoft Azure, Jenkins, shell scripting, and DevOps practices is required to get the most out of this Terraform book.
Book Synopsis GitOps and Kubernetes by : Billy Yuen
Download or read book GitOps and Kubernetes written by Billy Yuen and published by Simon and Schuster. This book was released on 2021-03-23 with total page 342 pages. Available in PDF, EPUB and Kindle. Book excerpt: Part 1. Background. 1. Why GitOps? -- 2. Kubernetes and GitOps -- Part 2. Patterns and processes. 3. Environment management -- 4. Pipelines -- 5. Deployment strategies -- 6. Access control and security -- 7. Secrets -- 8. Observability -- Part 3. Tools. 9. Argo CD -- 10. Jenkins X -- 11. Flux.
Download or read book Container Security written by Liz Rice and published by O'Reilly Media. This book was released on 2020-04-06 with total page 201 pages. Available in PDF, EPUB and Kindle. Book excerpt: To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions. Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started. Explore attack vectors that affect container deployments Dive into the Linux constructs that underpin containers Examine measures for hardening containers Understand how misconfigurations can compromise container isolation Learn best practices for building container images Identify container images that have known software vulnerabilities Leverage secure connections between containers Use security tooling to prevent attacks on your deployment
Book Synopsis Data Pipelines with Apache Airflow by : Julian de Ruiter
Download or read book Data Pipelines with Apache Airflow written by Julian de Ruiter and published by Simon and Schuster. This book was released on 2021-04-05 with total page 480 pages. Available in PDF, EPUB and Kindle. Book excerpt: "An Airflow bible. Useful for all kinds of users, from novice to expert." - Rambabu Posa, Sai Aashika Consultancy Data Pipelines with Apache Airflow teaches you how to build and maintain effective data pipelines. A successful pipeline moves data efficiently, minimizing pauses and blockages between tasks, keeping every process along the way operational. Apache Airflow provides a single customizable environment for building and managing data pipelines, eliminating the need for a hodgepodge collection of tools, snowflake code, and homegrown processes. Using real-world scenarios and examples, Data Pipelines with Apache Airflow teaches you how to simplify and automate data pipelines, reduce operational overhead, and smoothly integrate all the technologies in your stack. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology Data pipelines manage the flow of data from initial collection through consolidation, cleaning, analysis, visualization, and more. Apache Airflow provides a single platform you can use to design, implement, monitor, and maintain your pipelines. Its easy-to-use UI, plug-and-play options, and flexible Python scripting make Airflow perfect for any data management task. About the book Data Pipelines with Apache Airflow teaches you how to build and maintain effective data pipelines. You’ll explore the most common usage patterns, including aggregating multiple data sources, connecting to and from data lakes, and cloud deployment. Part reference and part tutorial, this practical guide covers every aspect of the directed acyclic graphs (DAGs) that power Airflow, and how to customize them for your pipeline’s needs. What's inside Build, test, and deploy Airflow pipelines as DAGs Automate moving and transforming data Analyze historical datasets using backfilling Develop custom components Set up Airflow in production environments About the reader For DevOps, data engineers, machine learning engineers, and sysadmins with intermediate Python skills. About the author Bas Harenslak and Julian de Ruiter are data engineers with extensive experience using Airflow to develop pipelines for major companies. Bas is also an Airflow committer. Table of Contents PART 1 - GETTING STARTED 1 Meet Apache Airflow 2 Anatomy of an Airflow DAG 3 Scheduling in Airflow 4 Templating tasks using the Airflow context 5 Defining dependencies between tasks PART 2 - BEYOND THE BASICS 6 Triggering workflows 7 Communicating with external systems 8 Building custom components 9 Testing 10 Running tasks in containers PART 3 - AIRFLOW IN PRACTICE 11 Best practices 12 Operating Airflow in production 13 Securing Airflow 14 Project: Finding the fastest way to get around NYC PART 4 - IN THE CLOUDS 15 Airflow in the clouds 16 Airflow on AWS 17 Airflow on Azure 18 Airflow in GCP
Book Synopsis Terraform in Action by : Scott Winkler
Download or read book Terraform in Action written by Scott Winkler and published by Simon and Schuster. This book was released on 2021-08-24 with total page 604 pages. Available in PDF, EPUB and Kindle. Book excerpt: "An outstanding source of knowledge for Terraform enthusiasts of all levels." - Anton Babenko, Betajob Terraform in Action shows you how to automate and scale infrastructure programmatically using the Terraform toolkit. Summary In Terraform in Action you will learn: Cloud architecture with Terraform Terraform module sharing and the private module registry Terraform security in a multitenant environment Strategies for performing blue/green deployments Refactoring for code maintenance and reusability Running Terraform at scale Creating your own Terraform provider Using Terraform as a continuous development/continuous delivery platform Terraform in Action introduces the infrastructure-as-code (IaC) model that lets you instantaneously create new components and respond efficiently to changes in demand. You’ll use the Terraform automation tool to design and manage servers that can be provisioned, shared, changed, tested, and deployed with a single command. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology Provision, deploy, scale, and clone your entire stack to the cloud at the touch of a button. In Terraform, you create a collection of simple declarative scripts that define and manage application infrastructure. This powerful infrastructure-as-code approach automates key tasks like versioning and testing for everything from low-level networking to cloud services. About the book Terraform in Action shows you how to automate and scale infrastructure programmatically using the Terraform toolkit. Using practical, relevant examples, you’ll use Terraform to provision a Kubernetes cluster, deploy a multiplayer game, and configure other hands-on projects. As you progress to advanced techniques like zero-downtime deployments, you’ll discover how to think in Terraform rather than just copying and pasting scripts. What's inside Cloud architecture with Terraform Terraform module sharing and the private module registry Terraform security in a multitenant environment Strategies for performing blue/green deployments About the reader For readers experienced with a major cloud platform such as AWS. Examples in JavaScript and Golang. About the author Scott Winkler is a DevOps engineer and a distinguished Terraform expert. He has spoken multiple times at HashiTalks and HashiConf, and was selected as a HashiCorp Ambassador and Core Contributor in 2020. Table of Contents PART 1 TERRAFORM BOOTCAMP 1 Getting started with Terraform 2 Life cycle of a Terraform resource 3 Functional programming 4 Deploying a multi-tiered web application in AWS PART 2 TERRAFORM IN THE WILD 5 Serverless made easy 6 Terraform with friends 7 CI/CD pipelines as code 8 A multi-cloud MMORPG PART 3 MASTERING TERRAFORM 9 Zero-downtime deployments 10 Testing and refactoring 11 Extending Terraform by writing a custom provider 12 Automating Terraform 13 Security and secrets management
Book Synopsis Learn Kubernetes Security by : Kaizhe Huang
Download or read book Learn Kubernetes Security written by Kaizhe Huang and published by Packt Publishing Ltd. This book was released on 2020-07-09 with total page 330 pages. Available in PDF, EPUB and Kindle. Book excerpt: Secure your container environment against cyberattacks and deliver robust deployments with this practical guide Key FeaturesExplore a variety of Kubernetes components that help you to prevent cyberattacksPerform effective resource management and monitoring with Prometheus and built-in Kubernetes toolsLearn techniques to prevent attackers from compromising applications and accessing resources for crypto-coin miningBook Description Kubernetes is an open source orchestration platform for managing containerized applications. Despite widespread adoption of the technology, DevOps engineers might be unaware of the pitfalls of containerized environments. With this comprehensive book, you'll learn how to use the different security integrations available on the Kubernetes platform to safeguard your deployments in a variety of scenarios. Learn Kubernetes Security starts by taking you through the Kubernetes architecture and the networking model. You'll then learn about the Kubernetes threat model and get to grips with securing clusters. Throughout the book, you'll cover various security aspects such as authentication, authorization, image scanning, and resource monitoring. As you advance, you'll learn about securing cluster components (the kube-apiserver, CoreDNS, and kubelet) and pods (hardening image, security context, and PodSecurityPolicy). With the help of hands-on examples, you'll also learn how to use open source tools such as Anchore, Prometheus, OPA, and Falco to protect your deployments. By the end of this Kubernetes book, you'll have gained a solid understanding of container security and be able to protect your clusters from cyberattacks and mitigate cybersecurity threats. What you will learnUnderstand the basics of Kubernetes architecture and networkingGain insights into different security integrations provided by the Kubernetes platformDelve into Kubernetes' threat modeling and security domainsExplore different security configurations from a variety of practical examplesGet to grips with using and deploying open source tools to protect your deploymentsDiscover techniques to mitigate or prevent known Kubernetes hacksWho this book is for This book is for security consultants, cloud administrators, system administrators, and DevOps engineers interested in securing their container deployments. If you're looking to secure your Kubernetes clusters and cloud-based deployments, you'll find this book useful. A basic understanding of cloud computing and containerization is necessary to make the most of this book.
Book Synopsis Practical Cloud Security by : Chris Dotson
Download or read book Practical Cloud Security written by Chris Dotson and published by O'Reilly Media. This book was released on 2019-03-04 with total page 195 pages. Available in PDF, EPUB and Kindle. Book excerpt: With their rapidly changing architecture and API-driven automation, cloud platforms come with unique security challenges and opportunities. This hands-on book guides you through security best practices for multivendor cloud environments, whether your company plans to move legacy on-premises projects to the cloud or build a new infrastructure from the ground up. Developers, IT architects, and security professionals will learn cloud-specific techniques for securing popular cloud platforms such as Amazon Web Services, Microsoft Azure, and IBM Cloud. Chris Dotson—an IBM senior technical staff member—shows you how to establish data asset management, identity and access management, vulnerability management, network security, and incident response in your cloud environment.
Book Synopsis Accelerating Modernization with Agile Integration by : Adeline SE Chun
Download or read book Accelerating Modernization with Agile Integration written by Adeline SE Chun and published by IBM Redbooks. This book was released on 2020-07-01 with total page 650 pages. Available in PDF, EPUB and Kindle. Book excerpt: The organization pursuing digital transformation must embrace new ways to use and deploy integration technologies, so they can move quickly in a manner appropriate to the goals of multicloud, decentralization, and microservices. The integration layer must transform to allow organizations to move boldly in building new customer experiences, rather than forcing models for architecture and development that pull away from maximizing the organization's productivity. Many organizations have started embracing agile application techniques, such as microservice architecture, and are now seeing the benefits of that shift. This approach complements and accelerates an enterprise's API strategy. Businesses should also seek to use this approach to modernize their existing integration and messaging infrastructure to achieve more effective ways to manage and operate their integration services in their private or public cloud. This IBM® Redbooks® publication explores the merits of what we refer to as agile integration; a container-based, decentralized, and microservice-aligned approach for integration solutions that meets the demands of agility, scalability, and resilience required by digital transformation. It also discusses how the IBM Cloud Pak for Integration marks a significant leap forward in integration technology by embracing both a cloud-native approach and container technology to achieve the goals of agile integration. The target audiences for this book are cloud integration architects, IT specialists, and application developers.
Book Synopsis Infrastructure as Code by : Kief Morris
Download or read book Infrastructure as Code written by Kief Morris and published by "O'Reilly Media, Inc.". This book was released on 2020-12-08 with total page 430 pages. Available in PDF, EPUB and Kindle. Book excerpt: Six years ago, Infrastructure as Code was a new concept. Today, as even banks and other conservative organizations plan moves to the cloud, development teams for companies worldwide are attempting to build large infrastructure codebases. With this practical book, Kief Morris of ThoughtWorks shows you how to effectively use principles, practices, and patterns pioneered by DevOps teams to manage cloud-age infrastructure. Ideal for system administrators, infrastructure engineers, software developers, team leads, and architects, this updated edition demonstrates how you can exploit cloud and automation technology to make changes easily, safely, quickly, and responsibly. You'll learn how to define everything as code and apply software design and engineering practices to build your system from small, loosely coupled pieces. This book covers: Foundations: Use Infrastructure as Code to drive continuous change and raise the bar of operational quality, using tools and technologies to build cloud-based platforms Working with infrastructure stacks: Learn how to define, provision, test, and continuously deliver changes to infrastructure resources Working with servers and other platforms: Use patterns to design provisioning and configuration of servers and clusters Working with large systems and teams: Learn workflows, governance, and architectural patterns to create and manage infrastructure elements
Book Synopsis Bulletproof SSL and TLS by : Ivan Ristic
Download or read book Bulletproof SSL and TLS written by Ivan Ristic and published by Feisty Duck. This book was released on 2014 with total page 528 pages. Available in PDF, EPUB and Kindle. Book excerpt: Bulletproof SSL and TLS is a complete guide to using SSL and TLS encryption to deploy secure servers and web applications. Written by Ivan Ristic, the author of the popular SSL Labs web site, this book will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks. In this book, you’ll find just the right mix of theory, protocol detail, vulnerability and weakness information, and deployment advice to get your job done: - Comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI, with updates to the digital version - For IT security professionals, help to understand the risks - For system administrators, help to deploy systems securely - For developers, help to design and implement secure web applications - Practical and concise, with added depth when details are relevant - Introduction to cryptography and the latest TLS protocol version - Discussion of weaknesses at every level, covering implementation issues, HTTP and browser problems, and protocol vulnerabilities - Coverage of the latest attacks, such as BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and Heartbleed - Thorough deployment advice, including advanced technologies, such as Strict Transport Security, Content Security Policy, and pinning - Guide to using OpenSSL to generate keys and certificates and to create and run a private certification authority - Guide to using OpenSSL to test servers for vulnerabilities - Practical advice for secure server configuration using Apache httpd, IIS, Java, Nginx, Microsoft Windows, and Tomcat This book is available in paperback and a variety of digital formats without DRM.
