Software Security: Building Security In

3.61 avg rating
( 57 ratings by Goodreads )
 
9780321356703: Software Security: Building Security In

 "When it comes to software security, the devil is in the details. This book tackles the details."
--Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies

 

"McGraw's book shows you how to make the 'culture of security' part of your development lifecycle."
--Howard A. Schmidt, Former White House Cyber Security Advisor

 

"McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn't), buy this book and post it up on the lunchroom wall."
--Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security

 

Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing.

 

Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book's methods without radically changing the way you work. Inside you'll find detailed explanations of

  • Risk management frameworks and processes
  • Code review using static analysis tools
  • Architectural risk analysis
  • Penetration testing
  • Security testing
  • Abuse case development

In addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in.

"synopsis" may belong to another edition of this title.

From the Back Cover:

This is the Mobipocket version of the print book. ""When it comes to software security, the devil is in the details. This book tackles the details." "
--Bruce Schneier, CTO and founder, Counterpane, and author of "Beyond Fear" and "Secrets and Lies" ""McGraw's book shows you how to make the 'culture of security' part of your development lifecycle.""
--Howard A. Schmidt, Former White House Cyber Security Advisor ""McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn't), buy this book and post it up on the lunchroom wall.""
--Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of "Firewalls and Internet Security" Beginning where the best-selling book "Building Secure Software" left off, "Software Security" teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing. "Software Security" is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book's methods without radically changing the way you work. Inside you'll find detailed explanations of

  • Risk management frameworks and processes
  • Code review using static analysis tools
  • Architectural risk analysis
  • Penetration testing
  • Security testing
  • Abuse case development
In addition to the touchpoints, "Software Security" covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in.

About the Author:

Gary McGraw, Cigital, Inc.'s CTO, is a world authority on software security. Dr. McGraw is coauthor of five best selling books: Exploiting Software (Addison-Wesley, 2004), Building Secure Software (Addison-Wesley, 2001), Software Fault Injection (Wiley 1998), Securing Java (Wiley, 1999), and Java Security (Wiley, 1996). His new book, Software Security: Building Security In (Addison-Wesley 2006) was released in February 2006. As a consultant, Dr. McGraw provides strategic advice to major software producers and consumers. Dr. McGraw has written over ninety peer-reviewed technical publications and functions as principal investigator on grants from DARPA, National Science Foundation, and NIST's Advanced Technology Program. He serves on Advisory Boards of Authentica, Counterpane, and Fortify Software, as well as advising the CS Department at UC Davis, the CS Department at UVa, and the School of Informatics at Indiana University. Dr. McGraw holds a dual PhD in Cognitive Science and Computer Science from Indiana University and a BA in Philosophy from UVa. He is a member of the IEEE Security and Privacy Task Force, and was recently elected to the IEEE Computer Society Board of Governors. He is the producer of the Silver Bullet Security Podcast for IEEE Security & Privacy magazine, writes a monthly column for darkreading.com, and is often quoted in the press.

"About this title" may belong to another edition of this title.

Top Search Results from the AbeBooks Marketplace

1.

McGraw, Gary
Published by Prentice Hall
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Quantity Available: > 20
Seller:
INDOO
(Avenel, NJ, U.S.A.)
Rating
[?]

Book Description Prentice Hall. Book Condition: New. Brand New. Bookseller Inventory # 0321356705

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 46.62
Convert Currency

Add to Basket

Shipping: US$ 3.50
Within U.S.A.
Destination, Rates & Speeds

2.

Gary R. McGraw
Published by Pearson Education (US), United States (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Quantity Available: 10
Seller:
The Book Depository US
(London, United Kingdom)
Rating
[?]

Book Description Pearson Education (US), United States, 2006. Mixed media product. Book Condition: New. New.. Language: English . Brand New Book. When it comes to software security, the devil is in the details. This book tackles the details. --Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies McGraw s book shows you how to make the culture of security part of your development lifecycle. --Howard A. Schmidt, Former White House Cyber Security Advisor McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn t), buy this book and post it up on the lunchroom wall. --Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing. Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book s methods without radically changing the way you work. Inside you ll find detailed explanations ofRisk management frameworks and processes Code review using static analysis tools Architectural risk analysis Penetration testing Security testing Abuse case developmentIn addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in. Bookseller Inventory # AAK9780321356703

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 51.02
Convert Currency

Add to Basket

Shipping: FREE
From United Kingdom to U.S.A.
Destination, Rates & Speeds

3.

McGraw, Gary
Published by Addison-Wesley Professional (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Paperback Quantity Available: 1
Seller:
Murray Media
(North Miami Beach, FL, U.S.A.)
Rating
[?]

Book Description Addison-Wesley Professional, 2006. Paperback. Book Condition: New. Never used!. Bookseller Inventory # 0321356705

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 51.19
Convert Currency

Add to Basket

Shipping: US$ 1.99
Within U.S.A.
Destination, Rates & Speeds

4.

McGraw, Gary
Published by Addison-Wesley Professional
ISBN 10: 0321356705 ISBN 13: 9780321356703
New PAPERBACK Quantity Available: 2
Seller:
Lakeside Books
(Benton Harbor, MI, U.S.A.)
Rating
[?]

Book Description Addison-Wesley Professional. PAPERBACK. Book Condition: New. 0321356705 BRAND NEW, GIFT QUALITY! NOT OVERSTOCKS OR MARKED UP REMAINDERS! DIRECT FROM THE PUBLISHER!|1.92. Bookseller Inventory # OTF-Y-9780321356703

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 52.28
Convert Currency

Add to Basket

Shipping: US$ 3.99
Within U.S.A.
Destination, Rates & Speeds

5.

McGraw, Gary
Published by Addison-Wesley Professional
ISBN 10: 0321356705 ISBN 13: 9780321356703
New PAPERBACK Quantity Available: 1
Seller:
Qwestbooks COM LLC
(Bensalem, PA, U.S.A.)
Rating
[?]

Book Description Addison-Wesley Professional. PAPERBACK. Book Condition: New. 0321356705. Bookseller Inventory # Z0321356705ZN

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 57.04
Convert Currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, Rates & Speeds

6.

Gary R. McGraw
Published by Pearson Education (US), United States (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Quantity Available: 10
Seller:
The Book Depository
(London, United Kingdom)
Rating
[?]

Book Description Pearson Education (US), United States, 2006. Mixed media product. Book Condition: New. New.. Language: English . Brand New Book. When it comes to software security, the devil is in the details. This book tackles the details. --Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies McGraw s book shows you how to make the culture of security part of your development lifecycle. --Howard A. Schmidt, Former White House Cyber Security Advisor McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn t), buy this book and post it up on the lunchroom wall. --Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing. Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book s methods without radically changing the way you work. Inside you ll find detailed explanations ofRisk management frameworks and processes Code review using static analysis tools Architectural risk analysis Penetration testing Security testing Abuse case developmentIn addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in. Bookseller Inventory # AAK9780321356703

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 58.74
Convert Currency

Add to Basket

Shipping: FREE
From United Kingdom to U.S.A.
Destination, Rates & Speeds

7.

Gary McGraw
Published by Addison-Wesley Professional (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Paperback Quantity Available: 1
Seller:
Ergodebooks
(RICHMOND, TX, U.S.A.)
Rating
[?]

Book Description Addison-Wesley Professional, 2006. Paperback. Book Condition: New. PAP/CDR. Bookseller Inventory # DADAX0321356705

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 57.85
Convert Currency

Add to Basket

Shipping: US$ 3.99
Within U.S.A.
Destination, Rates & Speeds

8.

Gary McGraw
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Paperback Quantity Available: 1
Seller:
Grand Eagle Retail
(Wilmington, DE, U.S.A.)
Rating
[?]

Book Description Paperback. Book Condition: New. 1. Paperback. When it comes to software security, the devil is in the details. This book tackles the details. --Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and L.Shipping may be from multiple locations in the US or from the UK, depending on stock availability. 448 pages. 0.871. Bookseller Inventory # 9780321356703

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 62.49
Convert Currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, Rates & Speeds

9.

Gary McGraw
Published by Addison-Wesley Professional (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Paperback First Edition Quantity Available: 1
Seller:
Irish Booksellers
(Rumford, ME, U.S.A.)
Rating
[?]

Book Description Addison-Wesley Professional, 2006. Paperback. Book Condition: New. book. Bookseller Inventory # M0321356705

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 63.90
Convert Currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, Rates & Speeds

10.

Gary R. McGraw
Published by Pearson Education (US), United States (2006)
ISBN 10: 0321356705 ISBN 13: 9780321356703
New Quantity Available: 10
Seller:
Book Depository hard to find
(London, United Kingdom)
Rating
[?]

Book Description Pearson Education (US), United States, 2006. Mixed media product. Book Condition: New. New.. Language: English . This book usually ship within 10-15 business days and we will endeavor to dispatch orders quicker than this where possible. Brand New Book. When it comes to software security, the devil is in the details. This book tackles the details. --Bruce Schneier, CTO and founder, Counterpane, and author of Beyond Fear and Secrets and Lies McGraw s book shows you how to make the culture of security part of your development lifecycle. --Howard A. Schmidt, Former White House Cyber Security Advisor McGraw is leading the charge in software security. His advice is as straightforward as it is actionable. If your business relies on software (and whose doesn t), buy this book and post it up on the lunchroom wall. --Avi Rubin, Director of the NSF ACCURATE Center; Professor, Johns Hopkins University; and coauthor of Firewalls and Internet Security Beginning where the best-selling book Building Secure Software left off, Software Security teaches you how to put software security into practice.The software security best practices, or touchpoints, described in this book have their basis in good software engineering and involve explicitly pondering security throughout the software development lifecycle. This means knowing and understanding common risks (including implementation bugsand architectural flaws), designing for security, and subjecting all software artifacts to thorough, objective risk analyses and testing. Software Security is about putting the touchpoints to work for you. Because you can apply these touchpoints to the software artifacts you already produce as you develop software, you can adopt this book s methods without radically changing the way you work. Inside you ll find detailed explanations ofRisk management frameworks and processes Code review using static analysis tools Architectural risk analysis Penetration testing Security testing Abuse case developmentIn addition to the touchpoints, Software Security covers knowledge management, training and awareness, and enterprise-level software security programs. Now that the world agrees that software security is central to computer security, it is time to put philosophy into practice. Create your own secure development lifecycle by enhancing your existing software development lifecycle with the touchpoints described in this book. Let this expert author show you how to build more secure software by building security in. Bookseller Inventory # BZV9780321356703

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 65.69
Convert Currency

Add to Basket

Shipping: FREE
From United Kingdom to U.S.A.
Destination, Rates & Speeds

There are more copies of this book

View all search results for this book