Writing Secure Code 

1 2 3 4 5 6

• 1. Cover Page

• 2. LOC

• 3. Dedication

• 4. Introduction

• 5. Who Should Read This Book

• 6. Organization of This Book

• 7. Installing and Using the Sample Files

• 8. System Requirements

• 9. Support Information

• 10. Acknowledgments

• 11. Chapter 1: The Need for Secure Systems

• 12. Applications on the Wild Wild Web

• 13. The Need for Trustworthy Computing

• 14. Getting Everyone s Head in the Game

• 15. Some Ideas for Instilling a Security Culture

• 16. The Attacker s Advantage and the Defender s Dilemma

• 17. Summary

• 18. Chapter 2: The Proactive Security Development Process

• 19. Process Improvements

• 20. The Role of Education

• 21. Design Phase

• 22. Development Phase

• 23. Test Phase

• 24. Shipping and Maintenance Phases

• 25. Summary

• 26. Chapter 3: Security Principles to Live By

• 27. SD3: Secure by Design, by Default, and in Deployment

• 28. Security Principles

• 29. Summary

• 30. Chapter 4: Threat Modeling

• 31. Secure Design Through Threat Modeling

• 32. Security Techniques

• 33. Mitigating the Sample Payroll Application Threats

• 34. A Cornucopia of Threats and Solutions

• 35. Summary

• 36. Chapter 5: Public Enemy 1: The Buffer Overrun

• 37. Stack Overruns

• 38. Heap Overruns

• 39. Array Indexing Errors

• 40. Format String Bugs

• 41. Unicode and ANSI Buffer Size Mismatches

• 42. Preventing Buffer Overruns

• 43. The Visual C .NET GS Option

• 44. Summary

• 45. Chapter 6: Determining Appropriate Access Control

• 46. Why ACLs Are Important

• 47. What Makes Up an ACL?

• 48. A Method of Choosing Good ACLs

• 49. Creating ACLs

• 50. Getting the ACE Order Right

1 2 3 4 5 6