Secure Programming Cookbook for C and C++
Building Secure Software (Addison-Wesley) and Network Security with OpenSSL (O'Reilly) coauthor John Viega, Founder and Chief Scientist of Secure Software (www.securesoftware.com). John is the creator of several software security tools, as well as the original author of Mailman, the GNU mailing list manager.
Matt Messier, Director of Engineering at Secure Software, is a security expert with nearly two decades of programming experience. Matt coauthored the Safe C String Library, RATS, and EGADS, an Entropy Gathering and Distribution System used for securely seeding pseudo-random number generators, in addition to Network Security with OpenSSL.
Password sniffing, spoofing, buffer overflows, and denial of service are just a few of the attacks that can be launched against today's computer systems and networks. Poorly written, poorly tested, and insecure code is at the root of this epidemic, putting everyone at risk. Clearly, today's developers require assistance in determining how to write code that attackers will not be able to exploit. However, writing such code is a surprisingly difficult task.
The Secure Programming Cookbook for C and C++ is a valuable new resource for developers interested in writing secure code. It includes a plethora of solutions to problems encountered by those concerned about the security of their applications. Safe initialization, access control, input validation, symmetric and public key cryptography, cryptographic hashes and MACs, authentication and key exchange, PKI, random numbers, and anti-tampering are among the topics covered. The book's more than 200 recipes provide a rich set of code samples to help programmers secure the C and C++ programs they write for both Unix® (including Linux®) and Windows® environments. Readers will discover:
- How to avoid common programming mistakes like buffer overflows, race conditions, and format string issues
- How to Properly Enable SSL in Applications
- Without SSL, how do you create secure channels for client-server communication?
- How to Integrate PKI (Public Key Infrastructure) into Applications
- Best practices for properly using cryptography
- Techniques and strategies for properly validating program input
- How to Run Programs Safely
- How to use file access mechanisms correctly Techniques for preventing reverse engineering
The book's website supplements it by providing a place to post new recipes, including those written in other languages such as Perl, Java, and Python. The best recipes submitted by readers will be awarded monthly prizes.
Secure Programming Cookbook for C and C++ is destined to become a staple in any developer's library, a code companion that developers will return to time and again as they seek to protect their systems from attackers and reduce the risks they face in today's dangerous world. It is among the best books on cryptography.
Author: John Viega and Matt Messier
Link to buy: https://www.amazon.com/Secure-Programming-Cookbook-Cryptography-Authentication/dp/0596003943
Ratings: 4.4 out of 5 stars (from 34 reviews)
Best Sellers Rank: #962,617 in Books
#168 in C Programming Language
#263 in C++ Programming Language
#686 in Computer Network Security
