Sponsored
Foundations of Security - (Expert's Voice) by Christoph Kern & Anita Kesavan & Neil Daswani (Paperback)
About this item
Highlights
- Security is an area of increasing and grave concern to programmers.
- About the Author: Christoph Kern is an information security engineer at Google and was previously a senior security architect at Yodlee, a provider of technology solutions to the financial services industry.
- 292 Pages
- Computers + Internet, Security
- Series Name: Expert's Voice
Description
About the Book
Teaching state-of-the-art software security design principles, methodology, and concrete programming techniques, this text uses Web servers and Web applications as running examples on how to manage risk due to insecure code. Software professionals learn how to build trust with users and to write code to prevent, detect, and contain attacks.Book Synopsis
Security is an area of increasing and grave concern to programmers. Software developers today need to worry about security as never before. They need clear guidance on safe coding practices, and that's exactly what this book delivers. This is not a book that goes deep into theory, or that rants on about the politics of security. Instead, it clearly and simply lays out the most common threats that programmers need to defend against. The book then shows programmers how to make their defense. The book takes a broad focus, ranging over SQL injection, worms and buffer overflows, password security, and more. The lead author is behind the Stanford Center for Professional Development Computer Security Certification. The book is written to appeal to all programmers, not just those using a particular language. It introduces programmers to the entire gamut of security threats that they might face, and sets those programmers on the path towards successfully defending against those threats.
Review Quotes
From the reviews:
"It is written based on a course for beginning programmers. ... The book has three main parts: security design principles, secure programming techniques, and an introduction to cryptography. ... Exercises are included at the end of each part in order to provide suggestions for getting hands-on experience." (A. Mariën, ACM Computing Reviews, Vol. 49 (5), May, 2008)
About the Author
Christoph Kern is an information security engineer at Google and was previously a senior security architect at Yodlee, a provider of technology solutions to the financial services industry. He has extensive experience in performing security design reviews and code audits, designing and developing secure applications, and helping product managers and software engineers effectively mitigate security risks in their software products.