Secure Programming with Static Analysis

Description

Brian Chess / Jacob West, Secure Programming with Static Analysis

Addison-Wesley Professional | ISBN: 0321424778 | June 29, 2007 | 624 pages | PDF | 4 MB
The First Expert Guide to Static Analysis for Software Security! Creating secure code requires more than just good intentions. Programmers need to know that their code will be safe in an almost infinite number of scenarios and configurations. Static source code analysis gives users the ability to review their work with a fine-toothed comb and uncover the kinds of errors that lead directly to security vulnerabilities. Now, there’s a complete guide to static analysis: how it works, how to integrate it into the software development processes, and how to make the most of it during security code review. Static analysis experts Brian Chess and Jacob West look at the most common types of security defects that occur today. They illustrate main points using Java and C code examples taken from real-world security incidents, showing how coding errors are exploited, how they could have been prevented, and how static analysis can rapidly uncover similar mistakes. This book is for everyone concerned with building more secure software: developers, security engineers, analysts, and testers.

Coverage includes:


Why conventional bug-catching often misses security problems

How static analysis can help programmers get security right

The critical attributes and algorithms that make or break a static analysis tool

36 techniques for making static analysis more effective on your code

More than 70 types of serious security vulnerabilities, with specific solutions

Example vulnerabilities from Firefox, OpenSSH, MySpace, eTrade, Apache httpd, and many more

Techniques for handling untrusted input

Eliminating buffer overflows: tactical and strategic approaches

Avoiding errors specific to Web applications, Web services, and Ajax

Security-aware logging, debugging, and error/exception handling

Creating, maintaining, and sharing secrets and confidential information

Detailed tutorials that walk you through the static analysis process

-= Download Addison.Wesley.Secure.Programming.with.Static.Analysis.Jun.2007.eBook-BBL =-


No mirrors please ...

Deposit: http://depositfiles.com/files/1669964

Disclaimer:
Contents of this page are indexed from the Internet. All actions are under your responsability. Email us to report illegal contents or external links and we'll remove them immediately.

Please check the description for download links if any or do a search to find alternative books.

Can't Download?
Please search mirrors if you can't find download links for "Secure Programming with Static Analysis" in "Description" and someone else may update the links. Check the comments when back to find any updates.

Search Mirrors
Maybe some mirror pages will be helpful, search this book at top of this page or click here to find more info.

1. Ebooks list page : 1256
2. Secure Programming with Static Analysis
3. Secure Programming with Static Analysis
4. Secure Programming with Static Analysis (Repost)
5. Addison Wesley Secure Programming with Static Analysis Jun 2007 eBook-BBL
6. Secure Programming with Static Analysis (Addison-Wesley Software Security Series)
7. Secure Programming with Static Analysis (Addison-Wesley Software Security Series)
8. [share_ebook] Secure Programming with Static Analysis
9. Static Timing Analysis for Nanometer Designs: A Practical Approach
10. Static Crosstalk-Noise Analysis: For Deep Sub-Micron Digital Designs
11. Static Crosstalk-Noise Analysis: For Deep Sub-Micron Digital Designs
12. Static Crosstalk-Noise Analysis: For Deep Sub-Micron Digital Designs
13. The Finite Element Method: Linear Static and Dynamic Finite Element Analysis: Thomas J. R. Hughes
14. Secure Programming Cookbook For C And Cpp
15. Secure Programming Cookbook for C and C
16. Secure Programming Cookbook for C and C