9 Deadly Si of Software Security

9 Deadly Sins of Software Security

By Michael Howard, David LeBlancand John Viega



This essential book for all software developers -regardless of platform, language, or type of application- outlines the ?9 deadly sins?of software security and shows how to fix each one. Best-selling authors Michael Howard and David LeBlanc, who teach Microsoft employees how to secure code, have partnered with John Viega, the man who uncovered the 19 deadly programming sins to write this much-needed book.

Coverage includes: Windows, UNIX, Linux, and Mac OS X, C, C  , C#, Java, PHP, Perl, and Visual Basic,  Web, small client, and smart-client applications.

The book is carved up into 19 chapters, or Sins, and each is only 10-15pp long. Those are:

   1. Buffer Overflows

   2. Format String problems

   3. SQL injection

   4. Command injection

   5. Failure to handle errors

   6. Cross-site scripting

   7. Failing to protect network traffic

   8. Use of "magic" URLs and hidden forms

   9. Improper use of SSL

  10.  Use of weak password-based systems

  11.  Failing to store and protect data

  12.  Information leakage

  13.  Improper file access

  14.  Integer range errors

  15.  Trusting network address information

  16.  Signal race conditions

  17.  Unauthenticated key exchange

  18.  Failing to use cryptographically strong random numbers

  19.  Poor usability



http://rapidshare.com/files/20746654...0072260858.chm