19 Deadly Sins of Software Security
"Nouazeci si cinci la suta din bug-urile software sunt cauzate de aceleasi 19 greseli de programare." Amit Yoran, fostul director al The Department of Homeland Security’s National Cyber Security Division

Publisher McGraw-Hill/Osborne
Author(s) John Viega
ISBN 0072260858
Release Date 26 July 2005
Aceasta carte este esentiala pentru toti dezvoltatorii de software, indiferent de platforma, limbaj de programare sau tipul de aplicatie. Cartea scoate in evidenta "cele 19 pacate capitale" ale securitatii software si ne arata cum se poate repara fiecare dintre ele. Cartea acopera:
- Windows, UNIX, Linux, and Mac OS X
- C, C++, C#, Java, PHP, Perl, si Visual Basic
- Web, small client, si smart-client applications
De pe Coperta:
"Secure your software by eliminating code vulnerabilities from the start. Detailed code examples throughout show the code defects as well as the fixes and defenses. If you write code, you need this book. Eliminate these security flaws from your code:
Buffer overruns
Format string problems
Integer overflows
SQL injection
Command injection
Failure to handle errors
Cross-site scripting
Failure to protect network traffic
Use of magic URLs and hidden forms
Improper use of SSL
Use of weak password-based systems
Failure to store and protect data securely
Information leakage
Trusting network address resolution
Improper file access
Race conditions
Unauthenticated key exchange
Failure to use cryptographically strong random numbers
Poor usability"










