Writing Secure Code : Practical Strategies and Proven Techniques for Building Secure Applications in a Networked World

作者：MichaelHoward/DavidLeBlanc

出版社：MicrosoftPress

副标题：PracticalStrategiesandProvenTechniquesforBuildingSecureApplicationsinaNetworkedWorld

出版年：2002-12-04

页数：768

定价：USD49.99

装帧：Paperback

ISBN：9780735617223

内容简介
······

Keep black-hat hackers at bay with the tips and techniques in this entertaining, eye-opening book! Developers will learn how to padlock their applications throughout the entire development process from designing secure applications to writing robust code that can withstand repeated attacks to testing applications for security flaws. Short, easily digested chapters reveal proven principles, strategies, and coding techniques. The authors two battle-scarred veterans who have solved some of the industry s toughest security problems provide sample code in several languages. This edition includes updated information about threat modeling, designing a security process, international issues, file-system issues, adding privacy to applications, and performing security code reviews. It also includes enhanced coverage of buffer overruns, Microsoft(r) .NET security, and Microsoft ActiveX(r) development, plus practical checklists for developers, testers, and program managers.

评论 ······

the book is for the programmer, written by the engineers in Microsoft.
Comprehensive, enomerous knowledge

感觉这本书适合大型项目，从项目架构开始行架构的安全审计，到项目开发过程通过一些最佳实践避免很多安全问题，项目开发之后进行安全测试，最后还要进行文档化，如何进行安全部署等。虽然之前听过很多次堆栈溢出之类的词语，通过这本书还是第一次了解到具体的攻击过程以及对应原理。

感觉这本书适合大型项目，从项目架构开始行架构的安全审计，到项目开发过程通过一些最佳实践避免很多安全问题，项目开发之后进行安全测试，最后还要进行文档化，如何进行安全部署等。虽然之前听过很多次堆栈溢出之类的词语，通过这本书还是第一次了解到具体的攻击过程以及对应原理。

the book is for the programmer, written by the engineers in Microsoft.
Comprehensive, enomerous knowledge

• 下载电子版：下载地址
• 购买纸质版：京东商城
• 购买纸质版：当当网