The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
Language: English
Published by Addison-Wesley Publishing, 2006
- Softcover
- Used
Seller: Salish Sea Books, Bellingham, WA, U.S.A.Salish Sea Books
AbeBooks seller since May 15, 2007
Condition: Used - Good
US$ 174.95
Quantity: 1 available
Add to basketItem description from seller
** Two-Volume Set Edition **; Good+; Softcover; Light overall wear to the covers of both volumes with a few small handling-marks and clear protective tape applied over the spines; All three textblock sides of both volumes are clean and unmarked; The endpapers and text pages of both volumes are all clean and unmmarked; The binding of each volume is excellent with a straight spine; This book set will be shipped in a sturdy cardboard box with foam padding; Medium Format (8.5" - 9.75" tall); 3.7 lbs; White and blue covers with title in black and red lettering; 2006, Addison-Wesley Publishing; 1174 pages; "The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities ," by Mark Dowd, et al.
Seller Inventory # SKU-0571AO12610016
- Title
- The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
- Author
- Mark Dowd, et al.
- Publisher
- Addison-Wesley Publishing
- Publication year
- 2006
- Condition
- Good
- Binding
- Soft cover
- Language
- English
- ISBN 10
- 0321444426
- ISBN 13
- 9780321444424
There are a number of secure programming books on the market, but none that go as deep as this one. The depth and detail exceeds all books that I know about by an order of magnitude.
Halvar Flake, CEO and head of research, SABRE Security GmbH
Note: This is now a 2 volume set which is shrink wrapped.
The Definitive Insiders Guide to Auditing Software Security
This is one of the most detailed, sophisticated, and useful guides to software security auditing ever written. The authors are leading security consultants and researchers who have personally uncovered vulnerabilities in applications ranging from sendmail to Microsoft Exchange, Check Point VPN to Internet Explorer. Drawing on their extraordinary experience, they introduce a start-to-finish methodology for ripping apart applications to reveal even the most subtle and well-hidden security flaws.
The Art of Software Security Assessment covers the full spectrum of software vulnerabilities in both UNIX/Linux and Windows environments. It demonstrates how to audit security in applications of all sizes and functions, including network and Web software. Moreover, it teaches using extensive examples of real code drawn from past flaws in many of the industry's highest-profile applications.
Coverage includes
Code auditing: theory, practice, proven methodologies, and secrets of the trade
Bridging the gap between secure software design and post-implementation review
Performing architectural assessment: design review, threat modeling, and operational review
Identifying vulnerabilities related to memory management, data types, and malformed data
UNIX/Linux assessment: privileges, files, and processes
Windows-specific issues, including objects and the filesystem
Auditing interprocess communication, synchronization, and state
Evaluating network software: IP stacks, firewalls, and common application protocols
Auditing Web applications and technologies
This book is an unprecedented resource for everyone who must deliver secure software or assure the safety of existing software: consultants, security specialists, developers, QA staff, testers, and administrators alike.
Contents
ABOUT THE AUTHORS xv
PREFACE xvii
ACKNOWLEDGMENTS xxi
I Introduction to Software Security Assessment
1 SOFTWARE VULNERABILITY FUNDAMENTALS 3
2 DESIGN REVIEW 25
3 OPERATIONAL REVIEW 67
4 APPLICATION REVIEW PROCESS 91
II Software Vulnerabilities
5 MEMORY CORRUPTION 167
6 C LANGUAGE ISSUES 203
7 PROGRAM BUILDING BLOCKS 297
Note: This is now a 2 volume set which is shrink wrapped.
Computer software is an integral part of modern society. Companies rely on applications to manage client information, payment data, and inventory tracking. Consumers use software for a variety of different reasons as well--to manage their daily lives, to communicate with friends and family, and to browse resources made available on the internet, to name a few. With such a heavy reliance on software in our society, questions surrounding the security of the pieces of software performing these various tasks begin to arise. Is the software we are using really secure? How can we verify that it is? And what are the implications of a particular application being compromised? These are some of the questions that this book attempts to address. This book sheds light on the theory and practice of code auditing--how to rip apart an application and discover security vulnerabilities.
Note: This is now a 2 volume set which is shrink wrapped.
Computer software is an integral part of modern society. Companies rely on applications to manage client information, payment data, and inventory tracking. Consumers use software for a variety of different reasons as well--to manage their daily lives, to communicate with friends and family, and to browse resources made available on the internet, to name a few. With such a heavy reliance on software in our society, questions surrounding the security of the pieces of software performing these various tasks begin to arise. Is the software we are using really secure? How can we verify that it is? And what are the implications of a particular application being compromised? These are some of the questions that this book attempts to address. This book sheds light on the theory and practice of code auditing--how to rip apart an application and discover security vulnerabilities.
"Synopsis" may belong to another edition of this title.
About the Author
Mark Dowd is a principal security architect at McAfee, Inc. and an established expert in the field of application security. His professional experience includes several years as a senior researcher at Internet Security Systems (ISS) X-Force, and the discovery of a number of high-profile vulnerabilities in ubiquitous Internet software. He is responsible for identifying and helping to address critical flaws in Sendmail, Microsoft Exchange Server, OpenSSH, Internet Explorer, Mozilla (Firefox), Checkpoint VPN, and Microsofts SSL implementation. In addition to his research work, Mark presents at industry conferences, including Black Hat and RUXCON.
John McDonald is a senior consultant with Neohapsis, where he specializes in advanced application security assessment across a broad range of technologies and platforms. He has an established reputation in software security, including work in security architecture and vulnerability research for NAI (now McAfee), Data Protect GmbH, and Citibank. As a vulnerability researcher, John has identified and helped resolve numerous critical vulnerabilities, including issues in Solaris, BSD, Checkpoint FireWall-1, OpenSSL, and BIND.
Justin Schuh is a senior consultant with Neohapsis, where he leads the Application Security Practice. As a senior consultant and practice lead, he performs software security assessments across a range of systems, from embedded device firmware to distributed enterprise web applications. Prior to his employment with Neohapsis, Justin spent nearly a decade in computer security activities at the Department of Defense (DoD) and related agencies. His government service includes a role as a lead researcher with the National Security Agency (NSA) penetration testing teamthe Red Team.
"About the title" may belong to another edition of this title.
Salish Sea Books
Bellingham, WA, U.S.A.
AbeBooks seller since May 15, 2007
Shipping rates within U.S.A.
| Item | 5 to 14 business days | 1 to 3 business days |
|---|---|---|
| First item | US$ 4.99 | US$ 12.95 |
Payment methods
Store description
Thank you for taking an interest in one of our books. Please see the "Shipping Terms" section below for details on our shipping and returns policies. We are a mail-order only bookstore located in Bellingham, WA specializing in modern out-of-print books of all genres. If you are an international customer, we ship internationally by UPS Worldwide Expedited. The average delivery time is 1 to 2 weeks, and each shipment can be fully tracked at www.ups.com. For international shipments, it is important to provide a valid phone number with your order. Most international shipments are delivered within 2 weeks. The only exceptions are when the customer has not provided a valid phone number and there are import duties which UPS needs to collect before making final delivery. In those cases, the package will be held at a nearby UPS Access Point until the customer either picks up the package in person or makes arrangements over the phone with UPS to release the package for final delivery. Our shipping charge only covers international postage. Import duties vary widely by country and are additional. We thoroughly clean all books that we offer for sale and do all basic book-repairs ourselves. Basic repairs include repairing slanted bindings, applying additional glue to hinges that have become excessively loose, hinge-tape repairs for damaged hinges, minor binding split repairs, gluing small tears in exterior of covers, removal (as much as possible) of black marker marks to covers of ex-library books, removal of smaller non-permanent stickers, straightening of minor bowing to covers or spine, and applying jacket protectors to books with torn or fragile jackets or for especially pristine or collectible books. We do not do major binding repairs, and any un-repairable binding splits or general weakness in binding will be noted. Any significant repairs such as a hinge-tape repair will also be noted. These repairs do not usually change the underlying condition grade, but do make the book more presentable. Some books are beyond help and will be listed as "Fair/Acceptable" or "Poor". Our books are graded conservatively with library books never graded above "Good" and used books rarely graded above "Very Good". Below is a list of the condition grades we use, in descending order: New/Fine Like New/Near Fine Very Good++ Very Good+ Very Good Minus Good++ Good+ Good Fair-to-Good Fair/Acceptable Poor Very Poor We try to grade accurately, but condition grades are often subjective, so please consider also any condition notes and book photos (when available) before placing an order. All book photos posted to our listings are actual photos of the book offered for sale and have been taken by us.…
Seller's business information
Salish Sea Books
WA, U.S.A.
Terms of sale
Thank you for taking an interest in one of our books. We are a mail-order only bookstore located in Bellingham, WA specializing in modern out-of-print books of all genres.
If you are an international customer, we ship internationally by UPS Worldwide Expedited. The average delivery time is 1 to 2 weeks, and each shipment can be fully tracked at www.ups.com. For international shipments, it is important to provide a valid phone number with your order. Most international shipments are delivered within 2 weeks. The only exceptions are when the customer has not provided a valid phone number and there are import duties which UPS needs to collect before making final delivery. In those cases, the package will be held at a nearby UPS Access Point until the customer either picks up the package in person or makes arrangements over the phone with UPS to release the package for final delivery. Our shipping charge only covers international postage. Import duties vary widely by country and are additional.
We thoroughly clean all books that we offer for sale and do all basic book-repairs ourselves. Basic repairs include repairing slanted bindings, applying additional glue to hinges that have become excessively loose, hinge-tape repairs for damaged hinges, minor binding split repairs, gluing small tears in exterior of covers, removal (as much as possible) of black marker marks to covers of ex-library books, removal of smaller non-permanent stickers, straightening of minor bowing to covers or spine, and applying jacket protectors to books with torn or fragile jackets or for especially pristine or collectible books.
We do not do major binding repairs, and any un-repairable binding splits or general weakness in binding will be noted. Any significant repairs such as a hinge-tape repair will also be noted. These repairs do not usually change the underlying condition grade, but do make the book more presentable. Some books are beyond help and will be listed as "Fair/Acceptable" or "Poor".
Our books are graded conservatively with library books never graded above "Good" and used books rarely graded above "Very Good". Below is a list of the condition grades we use, in descending order:
New/Fine
Like New/Near Fine
Very Good++
Very Good+
Very Good Minus
Good++
Good+
Good
Fair-to-Good
Fair/Acceptable
Poor
Very Poor
We try to grade accurately, but condition grades are often subjective, so please consider also any condition notes and book photos (when available) before placing an order.
All book photos posted to our listings are actual photos of the book offered for sale and have been taken by us.
Shipping terms
SHIPPING POLICY: For Domestic orders, we ship through the US Post Office and orders can be tracked at www.usps.com. Orders priced at $250 and above will require a signature upon delivery.
For International orders, we ship exclusively through UPS using their Worldwide Expedited shipping service. This is highly reliable courier service with most orders delivered within 1 to 2 weeks. Shipments can be tracked at www.ups.com.
For international shipments, it is important to provide a valid phone number so that you can be contacted by UPS (if necessary) to make final delivery arrangements. Our shipping price is for postage only. Import duties vary widely by country and are the responsibility of the customer.
RETURNS POLICY: We offer an unconditional 30 day return policy: books can be returned for any reason if sent back within 30 days of the date they are received. The buyer is responsible for shipping charges unless the book was mis-described, in which case we will be responsible for all shipping charges. If you need to return a book, please contact us through ABE and we will forward full return instructions.