Foundations of Security (eBook)

What Every Programmer Needs to Know

Christoph Kern, Anita Kesavan, Neil Daswani (Autoren)

eBook Download: PDF

2007 | 1st ed.
XXVII, 292 Seiten
Apress (Verlag)
978-1-4302-0377-3 (ISBN)

Infos

Software developers need to worry about security as never before. They need clear guidance on safe coding practices, and that's exactly what this book delivers. The book does not delve deep into theory, or rant about the politics of security. Instead, it clearly and simply lays out the most common threats that programmers need to defend against. It then shows programmers how to make their defense. The book takes a broad focus, ranging over SQL injection, worms and buffer overflows, password security, and more. It sets programmers on the path towards successfully defending against the entire gamut of security threats that they might face.

Christoph Kern is an information security engineer at Google and was previously a senior security architect at Yodlee, a provider of technology solutions to the financial services industry. He has extensive experience in performing security design reviews and code audits, designing and developing secure applications, and helping product managers and software engineers effectively mitigate security risks in their software products.

---

Foundations of Security: What Every Programmer Needs to Know teaches new and current software professionals state-of-the-art software security design principles, methodology, and concrete programming techniques they need to build secure software systems. Once you're enabled with the techniques covered in this book, you can start to alleviate some of the inherent vulnerabilities that make today's software so susceptible to attack. The book uses web servers and web applications as running examples throughout the book.For the past few years, the Internet has had a "e;wild, wild west"e; flavor to it. Credit card numbers are stolen in massive numbers. Commercial web sites have been shut down by Internet worms. Poor privacy practices come to light and cause great embarrassment to the corporations behind them. All these security-related issues contribute at least to a lack of trust and loss of goodwill. Often there is a monetary cost as well, as companies scramble to clean up the mess when they get spotlighted by poor security practices.It takes time to build trust with users, and trust is hard to win back. Security vulnerabilities get in the way of that trust. Foundations of Security: What Every Programmer Needs To Know helps you manage risk due to insecure code and build trust with users by showing how to write code to prevent, detect, and contain attacks. The lead author co-founded the Stanford Center for Professional Development Computer Security Certification. This book teaches you how to be more vigilant and develop a sixth sense for identifying and eliminating potential security vulnerabilities. You'll receive hands-on code examples for a deep and practical understanding of security. You'll learn enough about security to get the job done.

Inhalt

Security Goals
Secure Systems Design
Secure Design Principles
Exercises for Part 1
Worms and Other Malware
Buffer Overflows
Client-State Manipulation
SQL Injection
Password Security
Cross-Domain Security in Web Applications
Exercises for Part 2
Symmetric Key Cryptography
Asymmetric Key Cryptography
Key Management and Exchange
MACs and Signatures
Exercises for Part 3

Produkt-Details

• Erscheint lt. Verlag: 11.5.2007
• Zusatzinfo: XXVII, 292 p. 22 illus.
• Verlagsort: Berkeley
• Sprache: englisch
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Themenwelt: Informatik ► Theorie / Studium ► Kryptologie
• Schlagworte: Computer Security • cryptography • Design • Development • privacy • programming • Software • SQL • web applications
• ISBN-10: 1-4302-0377-3 / 1430203773
• ISBN-13: 978-1-4302-0377-3 / 9781430203773