The Art of Software Security Assessment: Identifying and Avoiding Software Vulnerabilities

摘要

This book is not for the fainthearted. Starting with its size and breadth, reading this also requires an ability to read and understand code, especially in C, as the book is rife with examples and listings, both created by the authors as well as taken from real applications (mostly open source). However, the authors reach out to the reader by providing an introduction of each covered subject, as well as by discussing the examples line by line, when needed. "Part I: Introduction to Software Security Assessment" opens up with definitions and explanations for common terms. This is not new stuff to anyone involved in software security (and shouldn't be to anyone involved in software development).