List Price: $74.99 Details

Save: $18.97 (25%)

FREE Returns

FREE delivery Wednesday, February 8

Only 12 left in stock - order soon.

[{"displayPrice":"$56.02","priceAmount":56.02,"currencySymbol":"$","integerValue":"56","decimalSeparator":".","fractionalValue":"02","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"4N7P60UVHeeqK7Ib%2FmYKo5UB1aoy81qcvQdV1gFTH48Ngg8QiqwpkB1ZY6rh7xrIxa4pEMeqpC5qbVYv%2BtVU2N2g%2FortycaLfAqGPfSF3hPqKXexjH79nTfpQvtR3NEf80HVyR8Ezz8%3D","locale":"en-US","buyingOptionType":"NEW"},{"displayPrice":"$27.15","priceAmount":27.15,"currencySymbol":"$","integerValue":"27","decimalSeparator":".","fractionalValue":"15","symbolPosition":"left","hasSpace":false,"showFractionalPartIfEmpty":true,"offerListingId":"wXc00PEJbXttl0bjDXNnUQwp7lvEDUi%2Ff%2BsjN%2FSXAEGUZEK%2FA9AMrz531Wah7oryyEXMKspKFnZ7bWpuMCT5WtLKs2KWMWn%2B5salXLbV1Z%2B91q1YDrLap%2F37oyCw9iQVvG%2BWICMyJLdPf%2BN37ri%2FC8Q32zYsE0Ggu66TlEk3FqPr3Wn%2Bn0Ty3A%3D%3D","locale":"en-US","buyingOptionType":"USED"}]

$$56.02 () Includes selected options. Includes initial monthly payment and selected options. Details

Secure transaction

Ships from

Amazon.com

Sold by

Amazon.com

Details

Ships from

Amazon.com

Sold by

Amazon.com

Return policy: Eligible for Return, Refund or Replacement within 30 days of receipt

Support: Free Amazon product support included

Add a gift receipt for easy returns

FREE delivery Thursday, February 9

Select delivery location

Used: Very Good | Details

Sold by A&B Book Sellers

Fulfilled by Amazon

Access codes and supplements are not guaranteed with used items.

Have one to sell?

Sell on Amazon

Other Sellers on Amazon

Added

Not added

$49.97
+ $3.99 shipping

Sold by: Orangeworld LLC

Added

Not added

$53.98
& FREE Shipping

Sold by: Karatay Store

Flip to back Flip to front

Listen Playing... Paused You're listening to a sample of the Audible audio edition.
Learn more

See all 2 images

Follow the Author

Gary McGraw

Software Security: Building Security In 1st Edition

by Gary McGraw (Author)

56 ratings

See all formats and editions

Price

New from

Used from

Paperback

"Please retry"

$56.02

$49.97

$13.28

Paperback
$27.15 - $56.02

24 Used from $13.28 10 New from $49.97 1 Collectible from $22.48

Enhance your purchase

"When it comes to software security, the devil is in the details. This book tackles the details."
--Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies

"McGraw's book shows you how to make the 'culture of security' part of your development lifecycle."
--Howard A. Schmidt, Former White House Cyber Security Advisor

"McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn't), buy this book and post it up on the lunchroom wall."
--Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security

Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing.

Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book's methods without radically changing the way you work. Inside you'll find detailed explanations of

Risk management frameworks and processes
Code review using static analysis tools
Architectural risk analysis
Penetration testing
Security testing
Abuse case development

In addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in.

ISBN-10

9780321356703
ISBN-13

978-0321356703
Edition

1st
Publisher

Addison-Wesley Professional
Publication date

January 23, 2006
Language

English
Dimensions

6.9 x 0.9 x 9.1 inches
Print length

448 pages
See all details

Frequently bought together

+
+

Total price:

To see our price, add these items to your cart.

Some of these items ship sooner than the others.

Show details Hide details

Choose items to buy together.

by Gary McGraw Paperback
$56.02
Only 12 left in stock - order soon.
Ships from and sold by Amazon.com.
Get it as soon as Wednesday, Feb 8
by Michael Howard Paperback
$45.82
In Stock.
Ships from and sold by Amazon.com.
Get it as soon as Tuesday, Feb 7
by Adam Shostack Paperback
$40.35
In Stock.
Ships from and sold by Amazon.com.
Get it as soon as Wednesday, Feb 8

James Ransome
12
Hardcover
21 offers from $10.89
Adam Shostack
264
Paperback
37 offers from $34.14
Michael Howard
46
Paperback
50 offers from $17.00
Robert Seacord
54
Paperback
23 offers from $35.79
Andrew Hoffman
128
Paperback
36 offers from $20.99
Greg Hoglund
40
Paperback
40 offers from $2.52

Editorial Reviews

Review

Overall, I rekon this was the best new security book I've seen this year. It certainly made me think more than any other security book I've read recently. I'd consider it a must-buy for the serious practitioner.

From the Back Cover

This is the Mobipocket version of the print book.

"When it comes to software security, the devil is in the details. This book tackles the details."
--Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies

"McGraw's book shows you how to make the 'culture of security' part of your development lifecycle."
--Howard A. Schmidt, Former White House Cyber Security Advisor

"McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn't), buy this book and post it up on the lunchroom wall."
--Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security

Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing.

Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book's methods without radically changing the way you work. Inside you'll find detailed explanations of

Risk management frameworks and processes
Code review using static analysis tools
Architectural risk analysis
Penetration testing
Security testing
Abuse case development

In addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs.

Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in.

Product details

ASIN ‏ : ‎ 0321356705
Publisher ‏ : ‎ Addison-Wesley Professional; 1st edition (January 23, 2006)
Language ‏ : ‎ English
Paperback ‏ : ‎ 448 pages
ISBN-10 ‏ : ‎ 9780321356703
ISBN-13 ‏ : ‎ 978-0321356703
Item Weight ‏ : ‎ 1.95 pounds
Dimensions ‏ : ‎ 6.9 x 0.9 x 9.1 inches

Best Sellers Rank: #774,489 in Books (See Top 100 in Books)
- #88 in CompTIA Certification Guides
- #1,287 in Software Development (Books)
- #1,458 in Internet & Telecommunications

Customer Reviews:
56 ratings

Brief content visible, double tap to read full content.

Full content visible, double tap to read brief content.

Videos

Help others learn more about this product by uploading a video!

Upload your video

About the author

Follow authors to get new release updates, plus improved recommendations.

Gary McGraw

Brief content visible, double tap to read full content.

Full content visible, double tap to read brief content.

Gary McGraw is co-founder of the Berryville Institute of Machine Learning. He is a globally recognized authority on software security and the author of eight best selling books on this topic. His titles include Software Security, Exploiting Software, Building Secure Software, Java Security, Exploiting Online Games, and 6 other books; and he is editor of the Addison-Wesley Software Security series. Dr. McGraw has also written over 100 peer-reviewed scientific publications. Gary serves on the Advisory Boards of Maxmyinterest, NTrepid, Ravenwhite, and Secure Code Warrior. He has also served as a Board member of Cigital and Codiscope (acquired by Synopsys) and as Advisor to Black Duck (acquired by Synopsys), Dasient (acquired by Twitter), Fortify Software (acquired by HP), and Invotas (acquired by FireEye). Gary produced the monthly Silver Bullet Security Podcast for IEEE Security & Privacy magazine for thirteen years. His dual PhD is in Cognitive Science and Computer Science from Indiana University where he serves on the Dean’s Advisory Council for the School of Informatics, Computing, and Engineering.

https://garymcgraw.com

https://berryvilleiml.com/

@cigitalgem

Customer reviews

4.5 out of 5

56 global ratings

5 star		77%
4 star		11%
3 star		4%
2 star		3%
1 star		6%

How customer reviews and ratings work

Top reviews from the United States

There was a problem filtering reviews right now. Please try again later.

Mani Akella

A good addition to my security library

Reviewed in the United States 🇺🇸 on November 16, 2016

Verified Purchase

A good addition to my collection - the matter is clear, well laid out and the language is simple and precise. Gary McGraw has been a pioneer of sorts in striving for Software Security - as the success of Cigital proves. His clarity of thought comes through well in this book.

The one space I see need for change is that this book addresses the traditional software development scenario. As more of the world moves to Agile and DevOps, this model will need to be adapted to fit into ever shrinking and more focused development cycles - I look forward to an update from Dr. McGraw on security for the DevOps world.

3 people found this helpful

Helpful

Charles W.

Gary McGraw's writings are very good. Excellent in fact

Reviewed in the United States 🇺🇸 on May 14, 2017

Verified Purchase

Most insightful book regardless that it was published some time ago. Everything that is covered is applicable and needed today. This is more than just a light guide and advice; this is a complete and heavy book that all developers and especially those who want to improve security in software within their community. Gary McGraw's writings are very good. Excellent in fact. I highly recommend his books along with this one.

One person found this helpful

Helpful

Michigander

Enclosed Software CD doesn't work

Reviewed in the United States 🇺🇸 on February 25, 2014

Verified Purchase

This book was prescribed for a course I took in 2011-12. While the book covers the fundamentals well, the enclosed CD, which provides a copy of Fortify software didn't work. Assignments using the software on the CD was part of our course, and since the CD didn't work, the quality of course (not to mention the grades) suffered.

As it turns out Gary McGraw offered fortify as a freeware, and without properly identifying the impact on this product( the book), he sold the software to HP. This is another case of lack of thorough due diligence prior to closing mergers and acquisitions. Unfortunately as always is the case customers ( in this case the students) were the losers.

Of course, part of missed due diligence was our faculty that had not vetted if everything worked before conducting the course.

Good book if only updated with relevant tools.

4 people found this helpful

Helpful

R. Gupta

Read this book if you care about software security

Reviewed in the United States 🇺🇸 on August 28, 2019

Verified Purchase

Well written book a must read for every software practitioner
I hope more software architects will buy this book than security folks

One person found this helpful

Helpful

Robin

Good book if you need background on how to go ...

Reviewed in the United States 🇺🇸 on May 11, 2017

Verified Purchase

Good book if you need background on how to go about getting a software security plan in place and functioning.

One person found this helpful

Helpful

Jerry Jackson

Good background source.

Reviewed in the United States 🇺🇸 on December 30, 2019

Verified Purchase

Excellent source for the casual reader interested in the subject.

One person found this helpful

Helpful

R. Sibincic

Reviewed in the United States 🇺🇸 on March 5, 2016

Verified Purchase

Great resource. Copyright 2005. Included Fortify Source Code Analysis Demo CD/Software is also dated 2005. Unfortunately, Fortify was acquired by HP, which appears to no longer provide a "rulepack" which is required for installation. I searched Fortify's site and HP's without success.

2 people found this helpful

Helpful

Jose A. Villegas

Excellent book!!!

Reviewed in the United States 🇺🇸 on December 24, 2012

Verified Purchase

McGraw is a real pioneer, leading the way in the fundamental issues regarding the software development life cycle. This book is easy to read, and understand while providing the tools necessary to properly build secure software. If you are a software developer or a software security professional, this book is a must read!

One person found this helpful

Helpful

Top reviews from other countries

Arturo Cordoba

Five Stars

Reviewed in the United Kingdom 🇬🇧 on October 31, 2015

Verified Purchase

Good book, good delivery!

Lisseth

Excellent

Reviewed in Germany 🇩🇪 on February 22, 2015

Verified Purchase

I was received the book in perfect condition and in the expected time. Excellent product and service, fast delivery ...

See all reviews