Open AccessBook
Writing Secure Code
Michael Howard,David LeBlanc,Brian Valentine +2 more
- 03 Nov 2001
584
TL;DR: The first book that focuses on programming secure applications in general instead of covering security for just the Web developer, network administrator, or IT professional is as mentioned in this paper, which provides software designers, architects, developers, and testers the training, theory, and techniques they need to ensure security.
read more
Abstract: From the Publisher:
Security mistakes by software architects, designers, and developers contribute to an ongoing plague that costs businesses millions of dollars every year when malicious intruders attack interconnected applications, steal credit-card numbers, and deface Web sites. Writing Secure Code offers a ready cure. This fact-filled, eye-opening title covers the major aspects of creating secure applications through the entire development process, from secure design, to writing robust code that can easily withstand an attack, to testing applications for security vulnerabilities. Writing Secure Code provides software designers, architects, developers, and testers the training, theory, and techniques they need to ensure security. Topics covered include security principles, how to design, code, and test for security, how to write secure code for Microsoft® .NET APIs, why companies neglect security, the 10 immutable laws of security and security administration, and more. Developers who read this title will have the peace of mind that comes from knowing that the code they develop is not only fast, but secure. Both authors are top security experts at Microsoft who have helped solve some of the toughest security problems in the computing industry.
No more malicious attacks! Learn the best practices for writing secure code, with samples in Microsoft Visual Basic®.NET, Visual C++®, Perl, and Visual C#®.
This is the first book that focuses on programming secure applications in general instead of covering security for just the Web developer, network administrator, or IT professional.
Key Book Benefits:
* Demonstrates the best practices for creating secure codethrough the entire development processfrom design to programming to testing
* Includes code samples in Visual Basic .NET, Visual C++, Perl, and Visual C#.
* Focuses on programming secure applications in general instead of covering security for the Web developer, network administrator, or IT professional
read more
Chat with Paper
AI Agents for this Paper
Find similar papers on Google Scholar, PubMed and Arxiv
Write a critical review of this paper
Analyze citations of this paper to find unaddressed research gaps
Citations
A Classification of SQL-Injection Attacks and Countermeasures
William G. J. Halfond,Jeremy Viegas,Alessandro Orso +2 more
- 01 Jan 2006
TL;DR: An extensive review of the different types of SQL injection attacks known to date is presented, including descriptions and examples of how attacks of that type could be performed and existing detection and prevention techniques against SQL injections.
Security in embedded systems: Design challenges
TL;DR: An introduction to the challenges involved in secure embedded system design is provided, recent advances in addressing them are discussed, and opportunities for future research are identified.
DAG-based attack and defense modeling: don’t miss the forest for the attack trees
TL;DR: This paper presents the current state of the art on attack and defense modeling approaches that are based on directed acyclic graphs (DAGs), and proposes a taxonomy of the described formalisms.
353
Cyber security threat analysis and modeling of an unmanned aerial vehicle system
Ahmad Y. Javaid,Weiqing Sun,Vijay Devabhaktuni,Mansoor Alam +3 more
- 01 Nov 2012
TL;DR: Various security threats to a UAV system is analyzed and a cyber-security threat model showing possible attack paths has been proposed to help designers and users of the UAV systems to understand the threat profile of the system so as to allow them to address various system vulnerabilities, identify high priority threats, and select mitigation techniques for these threats.
316
Tamper resistance mechanisms for secure embedded systems
Srivaths Ravi,Anand Raghunathan,Srimat Chakradhar +2 more
- 05 Jan 2004
TL;DR: This paper surveys various tamper or attack techniques, and explains how they can be used to undermine or weaken security functions in embedded systems.
Related Papers (5)
Bruce Schneier
- 01 Jan 1999
Zhendong Su,Gary Wassermann +1 more
- 11 Jan 2006
Jerome H. Saltzer,Michael D. Schroeder +1 more
- 01 Sep 1975
Matt Bishop
- 01 Dec 2002
Stephen W. Boyd,Angelos D. Keromytis +1 more
- 08 Jun 2004