Free Downloads Hunting Security Bugs (Developer Reference)
Learn how to think like an attacker—and identify potential security issues in your software. In this essential guide, security testing experts offer practical, hands-on guidance and code samples to help you find, classify, and assess security bugs before your software is released. Discover how to:Identify high-risk entry points and create test cases Test clients and servers for malicious request/response bugs Use black box and white box approaches to help reveal security vulnerabilities Uncover spoofing issues, including identity and user interface spoofing Detect bugs that can take advantage of your program’s logic, such as SQL injection Test for XML, SOAP, and Web services vulnerabilities Recognize information disclosure and weak permissions issues Identify where attackers can directly manipulate memory Test with alternate data representations to uncover canonicalization issues Expose COM and ActiveX repurposing attacks PLUS—Get code samples and debugging tools on the Web
Series: Developer Reference
Paperback: 590 pages
Publisher: Microsoft Press; 1 edition (June 9, 2006)
Language: English
ISBN-10: 073562187X
ISBN-13: 978-0735621879
Product Dimensions: 7.4 x 1.2 x 9 inches
Shipping Weight: 2.3 pounds
Average Customer Review: 4.7 out of 5 stars See all reviews (6 customer reviews)
Best Sellers Rank: #715,840 in Books (See Top 100 in Books) #34 in Books > Computers & Technology > Programming > Languages & Tools > Debugging #131 in Books > Computers & Technology > Security & Encryption > Viruses #168 in Books > Computers & Technology > Certification > CompTIA
If you are looking for a great book to start / or to enhance your library on security this is the book. I was looking for a book that brought depth to the subject but didn't assume that I was an expert already. When I browsed this one in the bookstore, I was impressed that it started off with how you should think about testing your application and what the difference is when it comes to security testing. Funny thing now is that when ever I encounter a situation I think about how vulnerable. Believe me, thats pretty scary.The authors proceeded to give a logical path for working toward looking at all the areas where an application might be open to an attack. The authors uses thread models to help flush out the design of an application and explains why they are valuable and how to use them. They then get into looking at entry points and point out areas where you might not realize that you have one. They continue with a discussion on how a malicious client and server could be use to comprise your security. Next they cover ways that someone could fool the user into giving up information such as with spoofing and information disclosure, They then get into discussions about techniques such as buffer overflows, stack and heap manipulation, format string attack and script attacks including XML issues. Along with this you'll find information on permissions, areas for denial of services as well as ActiveX attacks. Finally, you find a very good checklist for doing a systematic approach to checking your security. The topics are well written and provide plenty of examples as well as thoughts about how to deal with the topic.Even if you don't read every chapter there is plenty of information for any particular area that you are interested in.
Bow Hunting For Beginners: The Complete Guide To Mastering Bow Hunting - 7 Amazing Bow Hunting Tips For Long Range Accuracy! (Crossbow Hunting, Deer Hunting) Hunting Security Bugs (Developer Reference) Hormigas / Ants (Criaturas diminutas!/Bugs, Bugs, Bugs!) (Multilingual Edition) Homemade Repellents: 31 Organic Repellents and Natural Home Remedies to Get Rid of Bugs, Prevent Bug Bites, and Heal Bee Stings (Homemade Repellents, Natural ... Homesteading, How to Get Rid of Bed Bugs) How to Get Rid of Bed Bugs: Learn How to Kill Bed Bugs and Prevent Bed Bug Bites Bugged by Bugs?: Safe, Natural Ways to Fight Ants, Houseflies, Lice, Bed Bugs, Mosquitoes, Ticks and More Home Security: Top 10 Home Security Strategies to Protect Your House and Family Against Criminals and Break-ins (home security monitor, home security system diy, secure home network) Deer & Deer Hunting's Guide to Better Bow-Hunting The iOS 5 Developer's Cookbook: Core Concepts and Essential Recipes for iOS Programmers (Developer's Library) The Swift Developer's Cookbook (includes Content Update Program) (Developer's Library) Social Security: Time for a Life of Leisure - The Guide of Secrets to Maximising Social Security Retirement Benefits and Planning Your Retirement (social ... disability, social security made simple) Social Security Disability Law: A Reference for Social Security Disability Claims International Relations, International Security, and Comparative Politics: A Guide to Reference and Information Sources (Reference Sources in the Social Sciences) Developer's Guide to Web Application Security Inside Windows Debugging (Developer Reference) Microsoft SQL Server 2012 High-Performance T-SQL Using Window Functions (Developer Reference) T-SQL Querying (Developer Reference) Object Thinking (Developer Reference) Windows® Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition (Developer Reference) Programming for the Internet of Things: Using Windows 10 IoT Core and Azure IoT Suite (Developer Reference)
