Practical Core Software Security
A Reference Framework
- 262 pages
- English
- ePUB (mobile friendly)
- Available on iOS & Android
About this book
As long as humans write software, the key to successful software security is making the software development program process more efficient and effective. Although the approach of this textbook includes people, process, and technology approaches to software security, Practical Core Software Security: A Reference Framework stresses the people element of software security, which is still the most important part to manage as software is developed, controlled, and exploited by humans.
The text outlines a step-by-step process for software security that is relevant to today's technical, operational, business, and development environments. It focuses on what humans can do to control and manage a secure software development process using best practices and metrics. Although security issues will always exist, students learn how to maximize an organization's ability to minimize vulnerabilities in software products before they are released or deployed by building security into the development process.
The authors have worked with Fortune 500 companies and have often seen examples of the breakdown of security development lifecycle (SDL) practices. The text takes an experience-based approach to apply components of the best available SDL models in dealing with the problems described above. Software security best practices, an SDL model, and framework are presented in this book. Starting with an overview of the SDL, the text outlines a model for mapping SDL best practices to the software development life cycle (SDLC). It explains how to use this model to build and manage a mature SDL program. Exercises and an in-depth case study aid students in mastering the SDL model.
Professionals skilled in secure software development and related tasks are in tremendous demand today. The industry continues to experience exponential demand that should continue to grow for the foreseeable future. This book can benefit professionals as much as students. As they integrate the book's ideas into their software security practices, their value increases to their organizations, management teams, community, and industry.
Frequently asked questions
- Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
- Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.
Information
Table of contents
- Cover Page
- Half Title Page
- Title Page
- Copyright Page
- Dedications
- Table of Contents
- List of Figures
- List of Tables
- Preface
- Acknowledgments
- About the Authors
- Chapter 1: Introduction
- Chapter 2: The Security Development Lifecycle
- Chapter 3: Security Assessment (A1): SDL Activities and Best Practices
- Chapter 4: Architecture (A2): SDL Activities and Best Practices
- Chapter 5: Design and Development (A3): SDL Activities and Best Practices
- Chapter 6: Design and Development (A4): SDL Activities and Best Practices
- Chapter 7: Ship (A5): SDL Activities and Best Practices
- Chapter 8: Post-Release Support (PRSA1 5)
- Chapter 9: Adapting Our Reference Framework to Your Environment
- Appendix A: Case Study for Chapters 3 Through 8 Exercises
- Appendix B: Answers to Chapter Quick-Check Questions
- Glossary
- Index