This essential book for all software developers--regardless of platform, language, or type of application--outlines the “19 deadly sins” of software security and shows how to fix each one. Best-selling authors Michael Howard and David LeBlanc, who teach Microsoft employees how to secure code, have partnered with John Viega, the man who uncovered the 19 deadly programming sins to write this much-needed book. Coverage includes: <ul>
<li>Windows, UNIX, Linux, and Mac OS X </li>
<li>C, C++, C#, Java, PHP, Perl, and Visual Basic </li>
<li>Web, small client, and smart-client applications </li>
</ul>

19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them

Computers & Technology

Viega, John

LeBlanc, David

Howard., Michael

Certification

McGraw-Hill/Osborne Media

Writing Secure Code"" covers the major aspects of creating secure applications through the entire development process. Its short, easily-digested chapters can provide software designers, architects, developers, and testers with the training, theory, and techniques they need to take the right actions to ensure security.

Writing Secure Code

Programming

Microsoft Press

Keep black-hat hackers at bay with the tips and techniques in this entertaining, eye-opening book! Developers will learn how to padlock their applications throughout the entire development process—from designing secure applications to writing robust code that can withstand repeated attacks to testing applications for security flaws. Easily digested chapters reveal proven principles, strategies, and coding techniques. The authors—two battle-scarred veterans who have solved some of the industry’s toughest security problems—provide sample code in several languages. This edition includes updated information about threat modeling, designing a security process, international issues, file-system issues, adding privacy to applications, and performing security code reviews. It also includes enhanced coverage of buffer overruns, Microsoft .NET security, and Microsoft ActiveX development, plus practical checklists for developers, testers, and program managers.

Writing Secure Code, Second Edition

Don’t wait for an attacker to find and exploit your security vulnerabilities—take the lead by assessing the state of your network’s security. This book delivers advanced network testing strategies, including vulnerability scanning and penetration testing, from members of the Microsoft security teams. These real-world practitioners provide hands-on guidance on how to perform security assessments, uncover security vulnerabilities, and apply appropriate countermeasures. The companion CD features time-saving tools and scripts that you can use to reveal and help correct security vulnerabilities in your own network. Sharpen and advance your security assessment skills, including how to: <ul>
<li>Detect vulnerabilities and perform penetration tests</li> <li>Conduct and properly report an IT security audit</li> <li>Find hidden hosts by using DNS, WINS, and NetBIOS</li> <li>Sweep your network to analyze network topology, existing hosts, and multi-homed systems</li> <li>Determine the status of ICP and UDP ports by using port scanning</li> </ul>
Recognize and help counter common network threats, including: <ul>
<li>War dialing, war driving, and Bluetooth attacks</li> <li>Packet and network sniffing</li> <li>IP, e-mail, and DNS spoofing</li> <li>Password cracking</li> <li>Communication interceptions and modifications</li> <li>IDS and IPS attacker detection avoidance</li> <li>Spam and other e-mail abuses</li> </ul>
CD features: <ul>
<li>Tools for testing e-mail, databases, and Web servers</li> <li>Scripts for finding common information leaks and other potential security issues</li> <li>Complete eBook in PDF format</li> </ul>
For customers who purchase an ebook version of this title, instructions for downloading the CD files can be found in the ebook.

Assessing Network Security

SMITH, BEN

Lam, Kevin

Get the definitive guide to writing more-secure code for Windows Vista—from the authors of the award-winning Writing Secure Code, Michael Howard and David LeBlanc. This reference is ideal for developers who understand the fundamentals of Windows programming and APIs. It complements Writing Secure Code, examining the delta between Windows XP and Windows Vista security. You get first-hand insights into design decisions, lessons learned from Windows Vista development, and practical advice for solving real-world security issues. Discover how to: <ul>
<li>Develop applications to run without administrator privileges </li> <li>Apply best practices for using integrity controls</li> <li>Help protect your applications with ASLR, NX, and SafeSEH</li> <li>Evaluate authentication, authorization, and cryptography enhancements in Windows Vista</li> <li>Write services that restrict privileges and tokens—and sidestep common problems</li> <li>Learn how Windows Internet Explorer 7 defenses and new security features affect your development efforts</li> </ul>
PLUS—Get Microsoft Visual C#, Visual C++, and C code samples on the Web

Writing Secure Code for Windows Vista (Pro - Step by Step Developer)

Networking & Cloud Computing