Writing Secure Code

• Authors: Michael Howard;David Leblanc;Brian Valentine
• Venue: Writing Secure Code
• Year: 2001

From the Publisher:Security mistakes by software architects, designers, and developers contribute to an ongoing plague that costs businesses millions of dollars every year when malicious intruders attack interconnected applications, steal credit-card numbers, and deface Web sites. Writing Secure Code offers a ready cure. This fact-filled, eye-opening title covers the major aspects of creating secure applications through the entire development process, from secure design, to writing robust code that can easily withstand an attack, to testing applications for security vulnerabilities. Writing Secure Code provides software designers, architects, developers, and testers the training, theory, and techniques they need to ensure security. Topics covered include security principles, how to design, code, and test for security, how to write secure code for Microsoft® .NET APIs, why companies neglect security, the 10 immutable laws of security and security administration, and more. Developers who read this title will have the peace of mind that comes from knowing that the code they develop is not only fast, but secure. Both authors are top security experts at Microsoft who have helped solve some of the toughest security problems in the computing industry. No more malicious attacks! Learn the best practices for writing secure code, with samples in Microsoft Visual Basic®.NET, Visual C++®, Perl, and Visual C#®. This is the first book that focuses on programming secure applications in general instead of covering security for just the Web developer, network administrator, or IT professional. Key Book Benefits: * Demonstrates the best practices for creating secure codethrough the entire development process—from design to programming to testing * Includes code samples in Visual Basic .NET, Visual C++, Perl, and Visual C#. * Focuses on programming secure applications in general instead of covering security for the Web developer, network administrator, or IT professional