Information Security: Principles and Practices MyITCertificationlab -- Access Card

Computers & Technology

BREITHAUPT, Jim

Merkow, Mark S.

Networking & Cloud Computing

Pearson IT Certification

Secure and Resilient Software: Requirements, Test Cases, and Testing Methods provides a comprehensive set of requirements for secure and resilient software development and operation. It supplies documented test cases for those requirements as well as best practices for testing nonfunctional requirements for improved information assurance. This resource-rich book includes:
 <ul>
 <li>Pre-developed nonfunctional requirements that can be reused for any software development project </li>
 <li>Documented test cases that go along with the requirements and can be used to develop a Test Plan for the software</li>
 <li>Testing methods that can be applied to the test cases provided </li>
 <li>A CD with all security requirements and test cases as well as MS Word versions of the checklists, requirements, and test cases covered in the book</li>
 
</ul>
 Offering ground-level, already-developed software nonfunctional requirements and corresponding test cases and methods, this book will help to ensure that your software meets its nonfunctional requirements for security and resilience. The accompanying CD filled with helpful checklists and reusable documentation provides you with the tools needed to integrate security into the requirements analysis, design, and testing phases of your software development lifecycle.
 Some Praise for the Book:
 This book pulls together the state of the art in thinking about this important issue in a holistic way with several examples. It takes you through the entire lifecycle from conception to implementation ... . ―Doug Cavit, Chief Security Strategist, Microsoft Corporation
 ...provides the reader with the tools necessary to jump-start and mature security within the software development lifecycle (SDLC). ―Jeff Weekes, Sr. Security Architect at Terra Verde Services ... full of useful insights and practical advice from two au

Secure and Resilient Software: Requirements, Test Cases, and Testing Methods

Raghavan, Lakshmikanth

Computer Science

Auerbach Publications

Complete coverage of the emerging standard for securely handling online payments. This guide explains SET's impact on online commerce and describes how to create SET-compliant solutions. Demonstrating exactly how to implement SET, the book also covers purchase and installation, application development, testing, and more. SET (Secure Electronic Transaction standard) is an open standard that has been endorsed by most software, hardware, and credit card companies. It will soon be the standard for e-commerce on the Internet.

Building SET Applications for Secure Transactions

Business & Money

Wheeler, Ken

Economics

John Wiley&Sons, Inc.

Let’s face it: the information age makes dummies of us all at some point. One thing we can say for sure, though, about things related to the Internet is that their best strengths are often also their worst weaknesses. This goes for virtual private networks (VPNs). They may reach a wide base of customers – but can also be vulnerable to viruses, hackers, spoofers, and other shady online characters and entities. VPNs may allow for super-efficient communication between customer and company – but they rely on information which, if compromised, can cause huge losses. The Internet is still a frontier – sometimes so wide open it leaves us bewildered – and, like any frontier, the risks go hand in hand with potentially huge rewards. 
Virtual Private Networks for Dummies offers you a no-nonsense, practical guide to evaluating your company’s need for a VPN, understanding what it takes to implement one, and undertaking the challenging quest to set it up, make it work, and keep it safe. Whether you’re the resident expert leading the project team, or you just want to learn what makes e-commerce tick, this detailed, from-the-ground-up guide will soon have you comfortably conceptualizing: <ul>
<li>Security goals and strategies</li> <li>The evolution of VPNs</li> <li>Privacy in VPNs</li> <li>Extranets</li> <li>Remote-Access VPNs</li> <li>Funding</li> <li>Custom network solutions design</li> <li>Testing VPNs</li> <li>And more</li> </ul>
With new products and technologies offering supposedly revolutionary solutions to IT departments every day, this book focuses on the real world – you know, the one full of obstacles, mishaps, threats, delays, and errors – and gives you the background knowledge to make decisions for yourself about your VPN needs. Written with a dash of humor, Virtual Private Networks for Dummies contains both technical detail (standards, protocols, etc.) and more general concepts (such as conducting cost-benefit analyses). This clear, authoritative guide will have you securely and cost-effectively networking over the Internet in no time.

Virtual Private Networks For Dummies

Certification

For Dummies

With their potential for vicious customer backlash and devastating sales drops, Internet privacy infractions--such as selling e-mail lists and personal data or operating an insecure site where credit-card or competitive-pricing information can be stolen--have become deadly serious business concerns. The E-Privacy Imperative is especially designed to help Web site owners and operators protect themselves, their customers, and their businesses through careful technology practices and responsible information handling. Readers will: * Understand the key arguments of privacy advocates, including major threats to privacy and federal regulations concerning privacy * Learn to avoid both purposeful and accidental or negligent invasions of privacy * Communicate security and privacy policies to customers and potential customers--to assuage their fears and keep them coming back for more.

The E-Privacy Imperative : Protect Your Customers' Internet Privacy and Ensure Your Company's Survival in the Electronic Age

Amacom Books

Practical Security for Agile and DevOps

This textbook was written from the perspective of someone who began his software security career in 2005, long before the industry began focusing on it. This is an excellent perspective for students who want to learn about securing application development. After having made all the rookie mistakes, the author realized that software security is a human factors issue rather than a technical or process issue alone. Throwing technology into an environment that expects people to deal with it but failing to prepare them technically and psychologically with the knowledge and skills needed is a certain recipe for bad results. 
Practical Security for Agile and DevOpsis a collection of best practices and effective implementation recommendations that are proven to work. The text leaves the boring details of software security theory out of the discussion as much as possible to concentrate on practical applied software security that is useful to professionals. It is as much a book for students’ own benefit as it is for the benefit of their academic careers and organizations. Professionals who are skilled in secure and resilient software development and related tasks are in tremendous demand. This demand will increase exponentially for the foreseeable future. As students integrate the text’s best practices into their daily duties, their value increases to their companies, management, community, and industry. 
The textbook was written for the following readers: 
Students in higher education programs in business or engineering disciplines 
AppSec architects and program managers in information security organizations 
Enterprise architecture teams with a focus on application development 
Scrum Teams including: 
Scrum Masters 
Engineers/developers 
Analysts 
Architects 
Testers 
DevOps teams 
Product owners and their management 
Project managers 
Application security auditors 
Agile coaches and trainers 
Instructors and trainers in academia and private organizations

"This text offers college students in Information Security Programs an accessible and practical guide on securing software development practices, regardless of which development methodology is used. It is written with a contemporary view on securing all types of software development practices or methodologies"--

Practical Core Software Security (Contemporary Issues in Social Science Research)

As long as humans write software, the key to successful software security is making the software development program process more efficient and effective. Although the approach of this textbook includes people, process, and technology approaches to software security, Practical Core Software Security: A Reference Framework stresses the people element of software security, which is still the most important part to manage as software is developed, controlled, and exploited by humans. 
The text outlines a step-by-step process for software security that is relevant to today’s technical, operational, business, and development environments. It focuses on what humans can do to control and manage a secure software development process using best practices and metrics. Although security issues will always exist, students learn how to maximize an organization’s ability to minimize vulnerabilities in software products before they are released or deployed by building security into the development process. 
The authors have worked with Fortune 500 companies and have often seen examples of the breakdown of security development lifecycle (SDL) practices. The text takes an experience-based approach to apply components of the best available SDL models in dealing with the problems described above. Software security best practices, an SDL model, and framework are presented in this book. Starting with an overview of the SDL, the text outlines a model for mapping SDL best practices to the software development life cycle (SDLC). It explains how to use this model to build and manage a mature SDL program. Exercises and an in-depth case study aid students in mastering the SDL model. 
Professionals skilled in secure software development and related tasks are in tremendous demand today. The industry continues to experience exponential demand that should continue to grow for the foreseeable future. This book can benefit professionals as much as students. As they integrate the book’s ideas into their software security practices, their value increases to their organizations, management teams, community, and industry.

Misra, Anmol

Ransome, James F.

As long as humans write software, the key to successful software security is making the software development program process more efficient and effective. Although the approach of this textbook includes people, process, and technology approaches to software security, Practical Core Software Security: A Reference Framework stresses the people element of software security, which is still the most important part to manage as software is developed, controlled, and exploited by humans.The text outlines a step-by-step process for software security that is relevant to today's technical, operational, business, and development environments. It focuses on what humans can do to control and manage a secure software development process using best practices and metrics. Although security issues will always exist, students learn how to maximize an organization's ability to minimize vulnerabilities in software products before they are released or deployed by building security into the development process. The authors have worked with Fortune 500 companies and have often seen examples of the breakdown of security development lifecycle (SDL) practices. The text takes an experience-based approach to apply components of the best available SDL models in dealing with the problems described above. Software security best practices, an SDL model, and framework are presented in this book. Starting with an overview of the SDL, the text outlines a model for mapping SDL best practices to the software development life cycle (SDLC). It explains how to use this model to build and manage a mature SDL program. Exercises and an in-depth case study aid students in mastering the SDL model. Professionals skilled in secure software development and related tasks are in tremendous demand today. The industry continues to experience exponential demand that should continue to grow for the foreseeable future. This book can benefit professionals as much as students. As they integrate the book's ideas into their software security practices, their value increases to their organizations, management teams, community, and industry.

Written in a friendly and easy-to-understand tone, Computer Security Assurance Using the Common Criteria helps readers navigate through all the activities within the Common Criteria (CC) that have gained the attention of the security community and will revolutionize how people compare, select, purchase, and maintain security systems. Practical examples aimed at deciphering the contents and activities within the CC help build an understanding that places readers on a path to real-world security assurance applications. Up-to-date coverage explains IT security assurance methodologies and the activities within any of the CC-defined user roles that are necessary for high quality and proven secure IT software and hardware.

Computer Security Assurance

Cengage Learning'

See the best price to sell, buy, or rent books by Merkow, Mark S.. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Merkow, Mark S.

See the best price to sell, buy, or rent books by Merkow, Mark S.. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Information Security: Principles and Practices MyITCertificationlab -- Access Card

Secure and Resilient Software: Requirements, Test Cases, and Testing Methods

Building SET Applications for Secure Transactions

Virtual Private Networks For Dummies

The E-Privacy Imperative : Protect Your Customers' Internet Privacy and Ensure Your Company's Survival in the Electronic Age

Practical Security for Agile and DevOps

Practical Security for Agile and DevOps

Practical Core Software Security (Contemporary Issues in Social Science Research)

Practical Core Software Security (Contemporary Issues in Social Science Research)

Computer Security Assurance