Home » Books » Designing Secure Software

Designing Secure Software Books

A Guide for Developers

Designing Secure Software



Buy   Reviews
Price: $38.57
Rating:
Author: Loren Kohnfelder
Publisher: No Starch Press
Published on: 2021
Pages: 312
Format: Paper book / ebook (PDF)
ISBN-10: 1718501927
ISBN-13: 9781718501928


Description:

Designing Secure Software consolidates Loren Kohnfelder's more than twenty years of experience into a concise, elegant guide to improving the security of technology products. Written for a wide range of software professionals, it emphasizes building security into software design early and involving the entire team in the process.

The book begins with a discussion of core concepts like trust, threats, mitigation, secure design patterns, and cryptography. The second part, perhaps this book's most unique and important contribution to the field, covers the process of designing and reviewing a software design with security considerations in mind. The final section details the most common coding flaws that create vulnerabilities, making copious use of code snippets written in C and Python to illustrate implementation vulnerabilities.

You'll learn how to: Identify important assets, the attack surface, and the trust boundaries in a system; Evaluate the effectiveness of various threat mitigation candidates; Work with well-known secure coding patterns and libraries; Understand and prevent vulnerabilities like XSS and CSRF, memory flaws, and more; Use security testing to proactively identify vulnerabilities introduced into code; Review a software design for security flaws effectively and without judgment.


Similar Books


Cloud Native Architecture and Design

Cloud Native Architecture and Design

by Shivakumar R Goniwada Build enterprise-grade cloud-native systems and learn all about cloud-native architecture and design. This book provides extensive in-depth details of patterns, tools, techniques, and processes with plenty of examples. Cloud Native Architecture and Design begins by explaining the fundamentals of cl......

Price:  $41.38  |  Publisher:  Apress  |  Release:  2021

Mastering VMware Horizon 8

Mastering VMware Horizon 8

by Peter von Oven Learn all about designing, installing, configuring, and managing VMware Horizon, with a core focus on how to deliver virtual desktops using Horizon. This book allows you to follow the complete process for deploying VMware Horizon and covers the design, deployment, and management of solutions. You'l......

Price:  $47.74  |  Publisher:  Apress  |  Release:  2021

Java Challenges

Java Challenges

by Michael Inden Expand your knowledge of Java with this entertaining learning guide, which features 100+ exercises and programming challenges. Java Challenges will prepare you for your next exam or job interview, and covers many practical topics, such as strings, arrays, data structures, recursion, and date and ti......

Price:  $48.95  |  Publisher:  Apress  |  Release:  2021

Event- and Data-Centric Enterprise Risk-Adjusted Return Management

Event- and Data-Centric Enterprise Risk-Adjusted Return Management

by Kannan Subramanian RDr. Sudheesh Kumar Kattumannil Take a holistic view of enterprise risk-adjusted return management in banking. This book recommends that a bank transform its siloed operating model into an agile enterprise model. It offers an event-driven, process-based, data-centric approach to help banks plan and implement an enterprise risk-ad......

Price:  $59.99  |  Publisher:  Apress  |  Release:  2022

Computer Vision and Augmented Reality in iOS

Computer Vision and Augmented Reality in iOS

by Ahmed Fathi Bekhit Learn how computer vision works, how augmented reality renders digital graphics into the physical world via an iPhone's camera, and how to incorporate these technologies into your own apps. This book shows you how to take full advantage of computer vision technologies. Interacting with other people......

Price:  $44.99  |  Publisher:  Apress  |  Release:  2021

WebAssembly for Cloud

WebAssembly for Cloud

by Shashank Mohan Jain Journey into the amazing world of WebAssembly (Wasm) and learn about how it can be applied on the cloud. This book is an introduction to Wasm aimed at professionals accustomed to working with cloud-related technologies such as Kubernetes and Istio service mesh. Author Shashank Jain begins with an i......

Price:  $39.99  |  Publisher:  Apress  |  Release:  2022

Building Applications with Azure Resource Manager (ARM)

Building Applications with Azure Resource Manager (ARM)

by David Rendon Learn how to leverage infrastructure as code with Azure Resource Manager (ARM) and the best practices to build, test, debug, and deploy your applications in Microsoft Azure using ARM templates and the new domain-specific language Bicep. As organizations consider moving partially or fully to the clo......

Price:  $49.99  |  Publisher:  Apress  |  Release:  2022

C and Python Applications

C and Python Applications

by Philip Joyce Solve problems by embedding Python code in a C programs, SQL methods, Python sockets. This book uses rudimentary mathematics and basic programming to create practical Python applications for embedding. You'll start with an introduction to C and Python, assuming a fundamental understanding of what p......

Price:  $33.74  |  Publisher:  Apress  |  Release:  2021

Introduction to Computer Organization

Introduction to Computer Organization

by Bob Plantz Introduction to Computer Organization gives programmers a practical understanding of what happens in a computer when you execute your code. You may never have to write x86-64 assembly language or design hardware yourself, but knowing how the hardware and software works will give you greater control......

Price:  $59.99  |  Publisher:  No Starch Press  |  Release:  2022

SQL: A Beginner's Guide, 3rd Edition

SQL: A Beginner's Guide, 3rd Edition

by Andy Oppel, Robert Sheldon Written to the SQL:2006 ANSI/ISO standard, this easy-to-follow guide will get you started programming in SQL right away. You will learn how to retrieve, insert, update, and delete database data, and perform management and administrative functions. SQL: A Beginner's Guide, Third Edition co......

Price:  $3.65  |  Publisher:  McGraw-Hill  |  Release:  2008