Foundations of Security: What Every Programmer Needs to Know

by Anita Kesavan, Neil Daswani, Christoph Kern

Book Overview

Security is an area of increasing and grave concern to programmers. Software developers today need to worry about security as never before. They need clear guidance on safe coding practices, and that's exactly what this book delivers. This is not a book that goes deep into theory, or that rants on about the politics of security. Instead, it clearly and simply lays out the most common threats that programmers need to defend against. The book then...

• Format: Paperback
• Language: English
• ISBN: 1590597842
• ISBN13: 9781590597842
• Release Date: February 2007
• Publisher: Apress
• Length: 292 Pages
• Weight: 1.40 lbs.
• Dimensions: 0.7" x 7.4" x 9.2"

Customer Reviews

Wonderful book!

The best security book I have ever come across. If you want to be great programmer in IT security, then go for this bookand it will lift you to greater hights in your professional

Programming with Security in Mind

An excellent book for new programmers. The first part of the book provides a very good overview of security concepts. Chapters 5-10 detail different attacks and their defense. At 290 pages, the authors don't waste the reader's time. Information is well covered with enough detail for most readers. Throughout the book the authors present code examples on exploits and their defense. Even through the examples are written in different languages, the authors explain the code clearly. The reader doesn't' have to be familiar with the particular language. I haven't written anything in Java in over six years, but had no problem understand the Java examples. If you are a new programmer or haven't read a book on security recently, this would be the book.

Bleeding Edge Security Advice for Programmers

While some of the good security books for software developers need to be updated, this is, in my opinion, a much needed new security book for programmers. It is clear yet not too formal with good examples. Even if you have done a bit of security programming, chapters 7 and on are definitely worth the read. Although this book doesn't have all the answers (e.g. no comparison of web programming languages), web programmers will not be disappointed and my guess is that most web programmers need to read this book. The authors work at Google and are dealing with some of the nastiest problems the Internet has to offer. They are very good communicators, have written some of the best recent papers and I'm glad to see Neil Daswani just started a blog on blogspot.

What all developers need to read

Our collective security against threats such as phishing, denial of service and online fraud in general depends not only on our own actions, but also on those of others. While other users may affect your security by their actions (or lack thereof), the most important person in terms of your security is the software developer. This is a book written to help software developers identify common problems and create security-conscious designs. This easily accessible book describes common problems in an instructive manner. It explains what will and what will not work, reviews good design principles, and offers an overview of commonly used cryptographic techniques. If every developer lived by the guidelines of this book, we would be in a much better shape than we currently are.

A must read for every developer!

This book teaches new and current software professionals state-of-the-art software security design principles, methodology, and concrete programming techniques they need to build secure software systems.