Excerpts
-
Security Testing
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “Testing leads to failure, and fa…
-
Path Traversal
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press File path traversals are a common …
-
Injection Attacks
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “If you ever injected truth into …
-
Security Design Review
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “A good, sympathetic review is al…
-
Anti-Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “Learn to see in another’s calami…
-
Trust and Responsibility Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press Trust and responsibility are the g…
-
Redundancy Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press Redundancy is a core strategy for …
-
Strong Enforcement Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press These patterns concern how to ensu…
-
Exposure Minimization Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press The largest group of patterns call…
-
Design Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press The first group of patterns descri…
-
Patterns
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “Art is pattern informed by sensi…
-
Categorizing Threats with STRIDE
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press In the late 1990s, Microsoft Windo…
-
Threats
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “The threat is usually more terri…
-
Information Privacy
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press In addition to the foundations of …
-
The Gold Standard
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press If C-I-A is the goal of secure sys…
-
C-I-A (confidentiality, integrity, and availability)
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press We traditionally build software se…
-
Classic security principles
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press The guiding principles of informat…
-
Introduction
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press This book is a guide for software …
-
Preface
The following is an excerpt from the book Designing Secure Software: A Guide for Developers by Loren Kohnfelder, Copyright 2022, No Starch Press “If you cannot—in the long run—te…