Résumé
Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing.
Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book's methods without radically changing the way you work. Inside you'll find detailed explanations of
- Risk management frameworks and processes
- Code review using static analysis tools
- Architectural risk analysis
- Penetration testing
- Security testing
- Abuse case development
In addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs.
Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in.
Sommaire
- Software Security Fundamentals
- Defining a Discipline
- A Risk Management Framework
- Seven Touchpoints For Software Security
- Introduction to Software Security Touchpoints
- Code Review with a Tool
- Architectural Risk Analysis
- Software Penetration Testing
- Risk-based Security Testing
- Abuse Cases
- Software Security meets Security Operations
- Software Security Grows Up
- An Enterprise Software Security Program
- Knowledge for Software Security
- A Taxonomy of Coding Errors
Caractéristiques techniques
PAPIER | |
Éditeur(s) | Addison Wesley |
Auteur(s) | Gary McGraw |
Parution | 22/02/2006 |
Nb. de pages | 410 |
Format | 18 x 23,5 |
Couverture | Broché |
Poids | 880g |
Intérieur | Noir et Blanc |
EAN13 | 9780321356703 |
ISBN13 | 978-0-321-35670-3 |
Avantages Eyrolles.com
Nos clients ont également acheté
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse