What do you think?
Rate this book
Secure Programming with Static Analysis: Getting Software Security Right with Static Analysis
The First Expert Guide to Static Analysis for Software Security!
Creating secure code requires more than just good intentions. Programmers need to know that their code will be safe in an almost infinite number of scenarios and configurations. Static source code analysis gives users the ability to review their work with a fine-toothed comb and uncover the kinds of errors that lead directly to security vulnerabilities. Now, there’s a complete guide to static how it works, how to integrate it into the software development processes, and how to make the most of it during security code review. Static analysis experts Brian Chess and Jacob West look at the most common types of security defects that occur today. They illustrate main points using Java and C code examples taken from real-world security incidents, showing how coding errors are exploited, how they could have been prevented, and how static analysis can rapidly uncover similar mistakes. This book is for everyone concerned with building more secure developers, security engineers, analysts, and testers.
Creating secure code requires more than just good intentions. Programmers need to know that their code will be safe in an almost infinite number of scenarios and configurations. Static source code analysis gives users the ability to review their work with a fine-toothed comb and uncover the kinds of errors that lead directly to security vulnerabilities. Now, there’s a complete guide to static how it works, how to integrate it into the software development processes, and how to make the most of it during security code review. Static analysis experts Brian Chess and Jacob West look at the most common types of security defects that occur today. They illustrate main points using Java and C code examples taken from real-world security incidents, showing how coding errors are exploited, how they could have been prevented, and how static analysis can rapidly uncover similar mistakes. This book is for everyone concerned with building more secure developers, security engineers, analysts, and testers.
591 pages, Kindle Edition
First published June 1, 2007
2 people are currently reading
17 people want to read
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
Displaying 1 of 1 review
January 19, 2018
This book is based on clearing loop-holes in a program using Software Security and Static Source Code. It discusses common programming errors that are the basis of security problems. Brian presented procedures to review code and fix errors and algorithmic analysis. It discusses System related functions and how to use them properly so that it does not pose a security threat. Research tools are also discussed.
In Secure Programming, basic programming errors like handling input, buffer overflow, and exceptions are analyzed. This book is a must-read for beginners and programmers who want to build a secure and close to error-prone code.
In Secure Programming, basic programming errors like handling input, buffer overflow, and exceptions are analyzed. This book is a must-read for beginners and programmers who want to build a secure and close to error-prone code.
Displaying 1 of 1 review