|
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them (Security One-off) by Michael Howard |
by Michael Howard
|
by Christopher Steel
|
Software Security: Building Security In (Addison-Wesley Software Security Series) by Gary McGraw |
by Tom Gallagher
|
Information Technology is for everyone, not just geeks. But that means security is everyone's business, as you will discover in the pages of this excellent book!
— Vinton G. Cerf - a Founding Father of the Internet
This book serves as a great complement to the courses that make up the Stanford Center for Professional Development (SCPD) Security Certification Program. The book explains in detail how to defend against a wide range of attacks, and teaches principles of secure system design.
— Dr. Dan Boneh, Associate Professor, Computer Science and Electrical Engineering, Stanford University
Foundations of Security: What Every Programmer Needs to Know teaches new and current software professionals state-of-the-art software security design principles, methodology, and concrete programming techniques they need to build secure software systems. Once youre enabled with the techniques covered in this book, you can start to alleviate some of the inherent vulnerabilities that make todays software so susceptible to attack. The book uses web servers and web applications as running examples throughout the book.
For the past few years, the Internet has had a "wild, wild west" flavor to it. Credit card numbers are stolen in massive numbers. Commercial web sites have been shut down by Internet worms. Poor privacy practices come to light and cause great embarrassment to the corporations behind them. All these security-related issues contribute at least to a lack of trust and loss of goodwill. Often there is a monetary cost as well, as companies scramble to clean up the mess when they get spotlighted by poor security practices.
It takes time to build trust with users, and trust is hard to win back. Security vulnerabilities get in the way of that trust. Foundations of Security: What Every Programmer Needs To Know helps you manage risk due to insecure code and build trust with users by showing how to write code to prevent, detect, and contain attacks.
Neil Daswani has served in a variety of research, development, teaching, and managerial roles at Stanford University, DoCoMo USA Labs, Yodlee, and Bellcore (now Telcordia Technologies). His areas of expertise include security, wireless data technology, and peer-to-peer systems. He has published extensively in these areas, frequently gives talks at industry and academic conferences, and has been granted several U.S. patents. He received a Ph.D. and a master's in computer science from Stanford University, and he currently works for Google.
He earned a bachelor's in computer science with honors with distinction from Columbia University.
Christoph Kern is an information security engineer at Google and was previously a senior security architect at Yodlee, a provider of technology solutions to the financial services industry. He has extensive experience in performing security design reviews and code audits, designing and developing secure applications, and helping product managers and software engineers effectively mitigate security risks in their software products.
Anita Kesavan is a freelance writer and received her M.F.A. in creative writing from Sarah Lawrence College. She also holds a bachelor's in English from Illinois-Wesleyan University. She specializes in communicating complex technical ideas in simple, easy-to-understand language.
Product Details
Would you like to update product info or give feedback on images?
|
|
![]() |
79% buy the item featured on this page: Foundations of Security: What Every Programmer Needs to Know (Expert's Voice) $35.99 |
![]() |
9% buy The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws $31.50 |
![]() |
5% buy Software Security: Building Security In (Addison-Wesley Software Security Series) $37.79 |
![]() |
4% buy Core Security Patterns: Best Practices and Strategies for J2EE(TM), Web Services, and Identity Management (Sun Core Series) $44.09 |
Tags Customers Associate with This Product(What's this?)Click on a tag to find related items, discussions, and people.
|
|
Share your thoughts with other customers:
|
|||||||||||||
Most Helpful Customer Reviews
Share your thoughts with other customers: Create your own review
|
|
|
This product's forum
(0 discussions)
Ask questions, Share opinions, Gain insight
Active discussions in related forums
|
||||||||||||||||||||||
|   |   |   |   | |||||||
|
|
You have no recently viewed items or searches.
After viewing product detail pages or search results, look here to find an easy way to navigate back to pages you are interested in. Look to the right column to find helpful suggestions for your shopping session. |
|
| ||
| ||
| ||
| ||