REVIEW - Foundations of Security - What Every Programmer Needs to Know

Title:

Foundations of Security - What Every Programmer Needs to Know

Author:

Christoph Kern, Anita Kesavan, Neil Daswani

ISBN:

1590597842

Publisher:

Apress (2007)

Pages:

290pp

Reviewer:

Mark Easterbrook

Reviewed:

December 2009

Rating:

★★★★★

Now that almost every device for which developers are generating code is connected to a network, and in most cases directly or indirectly to the Internet, it is essential for programmers to understand software security and how to protect against attack. Yet hardly a day goes by without a security incident of some kind, indicating that there is still a severe lack of security understanding in the software world.

This book goes a long way to addressing this shortfall and should be essential reading for every software developer.

Part one covers design principles: setting out the goals and how to design towards them. It also covers the well-intentioned but flawed approaches to security that lead to a false sense of security.

Part two explores all the major forms of attack and describes how to counter them including many examples of secure, and not so secure, code.

Part 3 is an Introduction to Cryptography and covers the subject in enough detail for the diligent designer to choose the correct encryption method.

Finally part 4 contains Appendices and references.

The book is well written and provides a broad subject matter while still containing enough detail to go from beginner to skilled practitioner.


Book cover image courtesy of Open Library.