The item you selected is unavailable, but we found something similar.

The Art of Software Security Testing: Identifying Software Security Flaws - Picture 1 of 1

Symantec Press Ser.: The Art of Software Security Testing : Identifying Software Security Flaws by Lucas Nelson, Dino Dai Zovi, Elfriede Dustin, Chris Wysopal and Luke Nelson (2006, Perfect)

Be the first towrite a review.

ThriftBooks (3574557)
99% positive feedback

Price:

$6.88

Free shipping

Estimated delivery Tue, May 14 - Sat, May 18

Returns:

30 days returns. Seller pays for return shipping.

Condition:

Acceptable

The Art of Software Security Testing: Identifying Software Security Flaws by Wysopal, Chris; Nelson, Lucas; Dai Zovi, Dino Readable copy. Pages may have considerable notes/highlighting. ~ ThriftBooks: Read More, Spend Less

About this product

Product Information

Risk-based security testing, the important subject of this book, is one of seven software security touchpoints introduced in my book, Software Security: Building Security In . This book takes the basic idea several steps forward. Written by masters of software exploit, this book describes in very basic terms how security testing differs from standard software testing as practiced by QA groups everywhere. It unifies in one place ideas from Michael Howard, David Litchfield, Greg Hoglund, and me into a concise introductory package. Improve your security testing by reading this book today." - Gary McGraw , Ph.D., CTO, Cigital; Author, Software Security, Exploiting Software, Building Secure Software, and Software Fault Injection ; www.cigital.com/ gem "As 2006 closes out, we will see over 5,000 software vulnerabilities announced to the public. Many of these vulnerabilities were, or will be, found in enterprise applications from companies who are staffed with large, professional, QA teams. How then can it be that these flaws consistently continue to escape even well-structured diligent testing? The answer, in part, is that testing still by and large only scratches the surface when validating the presence of security flaws. Books such as this hopefully will start to bring a more thorough level of understanding to the arena of security testing and make us all a little safer over time." - Alfred Huger , Senior Director, Development, Symantec Corporation "Software security testing may indeed be an art, but this book provides the paint-by-numbers to perform good, solid, and appropriately destructive security testing: proof that an ounce of creative destruction is worth a pound of patching later. If understanding how software can be broken is step one in every programmers' twelve-step program to defensible, secure, robust software, then knowledgeable security testing comprises at least steps two through six." - Mary Ann Davidson , Chief Security Officer, Oracle "Over the past few years, several excellent books have come out teaching developers how to write more secure software by describing common security failure patterns. However, none of these books have targeted the tester whose job it is to find the security problems before they make it out of the R&D lab and into customer hands. Into this void comes The Art of Software Security Testing: Identifying Software Security Flaws . The authors, all of whom have extensive experience in security testing, explain how to use free tools to find the problems in software, giving plenty of examples of what a software flaw looks like when it shows up in the test tool. The reader learns why security flaws are different from other types of bugs (we want to know not only that 'the program does what it's supposed to, ' but also that 'the program doesn't do that which it's not supposed to'), and how to use the tools to find them. Examples are primarily based on C code, but some description of Java, C#, and scripting languages help for those environments. The authors cover both Windows and UNIX-based test tools, with plenty of screenshots to see what to expect. Anyone who's doing QA testing on software should read this book, whether as a refresher for finding security problems, or as a starting point for QA people who have focused on testing functionality." - Jeremy Epstein , WebMethods State-of-the-Art Software Security Testing: Expert, Up to Date, and Comprehensive The Art of Software Security Testing delivers in-depth, up-to-date, battle-tested techniques for anticipating and identifying software security problems before the "bad guys" do. Drawing on decades of experience in application and penetration testing, this book's authors can help you transform your approach from mere "verification" to proactive "attack." The authors begin by systematically reviewing the desig

Product Identifiers

Publisher
Addison Wesley Professional
ISBN-10
0321304861
ISBN-13
9780321304865
eBay Product ID (ePID)
56993866

Product Key Features

Author
Luke Nelson, Elfriede Dustin, Lucas Nelson, Chris Wysopal, Dino Dai Zovi
Publication Name
Art of Software Security Testing : Identifying Software Security Flaws
Format
Perfect
Language
English
Series
Symantec Press Ser.
Publication Year
2006
Type
Textbook
Number of Pages
312 Pages

Dimensions

Item Length
9.1in
Item Height
0.8in
Item Width
7in
Item Weight
17.3 Oz

Additional Product Features

Lc Classification Number
Qa76.9.A25a795 2006
Table of Content
Foreword xiii Preface xvii Acknowledgments xxix About the Authors xxxi Part I: Introduction Chapter 1: Case Your Own Joint: A Paradigm Shift from Traditional Software Testing 3 Chapter 2: How Vulnerabilities Get Into All Software 19 Chapter 3: The Secure Software Development Lifecycle 55 Chapter 4: Risk-Based Security Testing: Prioritizing Security Testing with Threat Modeling 73 Chapter 5: Shades of Analysis: White, Gray, and Black Box Testing 93 Part II: Performing the Attacks Chapter 6: Generic Network Fault Injection 107 Chapter 7: Web Applications: Session Attacks 125 Chapter 8: Web Applications: Common Issues 141 Chapter 9: Web Proxies: Using WebScarab 169 Chapter 10: Implementing a Custom Fuzz Utility 185 Chapter 11: Local Fault Injection 201 Part III: Analysis Chapter 12: Determining Exploitability 233 Index 251
Copyright Date
2007
Target Audience
Scholarly & Professional
Topic
Software Development & Engineering / General, Networking / Vendor Specific, Security / General
Lccn
2006-027502
Dewey Decimal
005.8
Dewey Edition
22
Illustrated
Yes
Genre
Computers

All listings for this product

item 1 The Art of Software Security Testing: Identifying Software Security Flaws
$6.88
Free shipping
item 2 The Art of Software Security Testing: Identifying Software Security Flaws - GOOD
$7.35
Last oneFree shipping
item 3 The Art of Software Security Testing: Identifying Software Security Flaws
$7.36
Free shipping
item 4 Art of Software Security Testing, Th..., Wysopal, Chris
$7.69
Free shipping
item 5 Art of Software Security Testing, The:... by Wysopal, Chris Paperback / softback
$13.70
Free shipping
item 6 Art of Software Security Testing, The: Identifying Software Security Flaws: Ide
$19.97
Free shipping

See all 6

Best Selling in Textbooks

See all

Current slide {CURRENT_SLIDE} of {TOTAL_SLIDES}- Best Selling in Textbooks

Diagnostic and Statistical Manual of Mental Disorders DSM-5-TR by American Psychiatric Association (2022, Trade Paperback)
4.6 out of 5 stars based on 15 product ratings
$35.70 New
$34.00 Used
Leadership : Theory and Practice by Peter G. Northouse (2021, Trade Paperback, Revised edition)
5.0 out of 5 stars based on 1 product rating
$19.98 New
$10.00 Used
Self Heal by Design : The Role of Micro-organisms for Health by Barbara O'Neill (2018, Trade Paperback)
5.0 out of 5 stars based on 14 product ratings
$29.99 New
---- Used
Research Design : Qualitative, Quantitative, and Mixed Methods Approaches by J. David Creswell and John W. Creswell (2022, Trade Paperback)
4.2 out of 5 stars based on 5 product ratings
$20.98 New
$18.00 Used
Cognitive Behavior Therapy : Basics and Beyond by Judith S. Beck (2020, Hardcover)
5.0 out of 5 stars based on 4 product ratings
$18.95 New
$17.66 Used
Diagnostic and Statistical Manual of Mental Disorders : DSM-5-TR by American Psychiatric Association (2022, Hardcover)
4.9 out of 5 stars based on 7 product ratings
$41.45 New
$38.99 Used
Encyclopedia of Counseling : Master Review and Tutorial for the National Counselor Examination, State Counseling Exams, and the Counselor Preparation Comprehensive Examination by Howard Rosenthal (2017, Trade Paperback, Revised edition,New Edition)
4.9 out of 5 stars based on 17 product ratings
$23.29 New
$17.99 Used

Save on Textbooks

Current slide {CURRENT_SLIDE} of {TOTAL_SLIDES}- Save on Textbooks

Diagnostic and Statistical Manual of Mental Disorders DSM-5-TR Brand new
$32.00
Trending at $42.75
IBC 2021 International Building Code, Paperback - Brand New
$59.95
Trending at $63.99
International Residential Code for One and Two-Family Dwellings 2021 free ship
$58.00
Trending at $68.00
National Electrical Code (NEC) NFPA 70 2020 Edition Spiral USA STOCK
$33.90
Trending at $36.40
Publication Manual of the American Psychological Association: 7th Edition, 2020
$14.45
Trending at $15.97
The Mountain Is You: Transforming Self-Sabotage Into Self-Mastery Wiest Sealed
$7.59
Trending at $9.18

Shop by category

Symantec Press Ser.: The Art of Software Security Testing : Identifying Software Security Flaws by Lucas Nelson, Dino Dai Zovi, Elfriede Dustin, Chris Wysopal and Luke Nelson (2006, Perfect)

About this product

Product Information

Product Identifiers

Product Key Features

Dimensions

Additional Product Features

All listings for this product

item 1 The Art of Software Security Testing: Identifying Software Security Flaws

item 2 The Art of Software Security Testing: Identifying Software Security Flaws - GOOD

item 3 The Art of Software Security Testing: Identifying Software Security Flaws

item 4 Art of Software Security Testing, Th..., Wysopal, Chris

item 5 Art of Software Security Testing, The:... by Wysopal, Chris Paperback / softback

item 6 Art of Software Security Testing, The: Identifying Software Security Flaws: Ide

Best Selling in Textbooks

Diagnostic and Statistical Manual of Mental Disorders DSM-5-TR by American Psychiatric Association (2022, Trade Paperback)

Leadership : Theory and Practice by Peter G. Northouse (2021, Trade Paperback, Revised edition)

Self Heal by Design : The Role of Micro-organisms for Health by Barbara O'Neill (2018, Trade Paperback)

Research Design : Qualitative, Quantitative, and Mixed Methods Approaches by J. David Creswell and John W. Creswell (2022, Trade Paperback)

Cognitive Behavior Therapy : Basics and Beyond by Judith S. Beck (2020, Hardcover)

Diagnostic and Statistical Manual of Mental Disorders : DSM-5-TR by American Psychiatric Association (2022, Hardcover)

Encyclopedia of Counseling : Master Review and Tutorial for the National Counselor Examination, State Counseling Exams, and the Counselor Preparation Comprehensive Examination by Howard Rosenthal (2017, Trade Paperback, Revised edition,New Edition)

Save on Textbooks

Diagnostic and Statistical Manual of Mental Disorders DSM-5-TR Brand new

IBC 2021 International Building Code, Paperback - Brand New

International Residential Code for One and Two-Family Dwellings 2021 free ship

National Electrical Code (NEC) NFPA 70 2020 Edition Spiral USA STOCK

Publication Manual of the American Psychological Association: 7th Edition, 2020

The Mountain Is You: Transforming Self-Sabotage Into Self-Mastery Wiest Sealed

You may also like

Thomas Nelson Study Guides & Test Prep

Thomas Nelson Study Guides & Test Prep in English

Thomas Nelson Textbooks

Thomas Nelson 1950-1999 Publication Year Study Guides & Test Prep

Thomas Nelson 2010-Now Publication Year Study Guides & Test Prep

Thomas Nelson Hardcover Textbooks