Secure Coding : Principles and Practices

by Graff, Mark G.

• ISBN13: 9780596002428
• ISBN10: 0596002424
• Format: Paperback
• Copyright: 2003-07-01
• Publisher: Oreilly & Associates Inc
• More Book Details
• Purchase Benefits

Summary

Secure Coding: Principles & Practices looks at the problem of bad code in a new way. Packed with expert advice by authors with decades of experience in the computer security field, this concise and easy-to-read book explains why so much code today is filled with vulnerabilities. Readers learn what they must do at each stage of the development lifecycle to avoid writing code that attackers can exploit. It's the "Elements of Style" handbook for programmers who want to develop secure code.

Table of Contents

Preface	p. xiii
No Straight Thing	p. 1
The Vulnerability Cycle	p. 4
What is an Attack?	p. 6
Why Good People Write Bad Code	p. 14
A Call to Arms	p. 26
Architecture	p. 30
What Is Security Architecture?	p. 31
Principles of Security Architecture	p. 33
Case Study: The Java Sandbox	p. 51
Design	p. 55
Why Does Good Design Matter?	p. 55
Secure Design Steps	p. 56
Special Design Issues	p. 71
Bad Practices	p. 79
Case Studies	p. 81
Implementation	p. 99
Good Practices	p. 102
Bad Practices	p. 110
Case Studies	p. 117
Operations	p. 124
Security Is Everybody's Problem	p. 125
Good Practices	p. 127
Bad Practices	p. 143
Case Studies	p. 145
Automation and Testing	p. 154
Why Test?	p. 155
Good General Practices	p. 156
Good Practices Through the Lifecycle	p. 158
Risk Assessment Methodologies	p. 170
Case Studies	p. 172
Resources	p. 185
Index	p. 195
Table of Contents provided by Ingram. All Rights Reserved.