Foundations of Security: What Every Programmer Needs to Know
Product Description
Information Technology is for everyone, not just geeks. But that means security is everyone’s business, as you will discover in the pages of this excellent book!
— Vinton G. Cerf – a Founding Father of the InternetThis book serves as a great complement to the courses that make up the Stanford Center for Professional Development (SCPD) Security Certification Program. The book explains in detail how to defend against a wide range of attacks, and teaches princi… More >>

Foundations of Security: What Every Programmer Needs to Know

Having an English major as one of the authors makes a big difference. The expertise from the other two reknown authors is communicated in simple, easy-to-understand language.
Reviews: 5 / 5
While some of the good security books for software developers need to be updated, this is, in my opinion, a much needed new security book for programmers. It is clear yet not too formal with good examples. Even if you have done a bit of security programming, chapters 7 and on are definitely worth the read.
Although this book doesn’t have all the answers (e.g. no comparison of web programming languages), web programmers will not be disappointed and my guess is that most web programmers need to read this book.
The authors work at Google and are dealing with some of the nastiest problems the Internet has to offer. They are very good communicators, have written some of the best recent papers and I’m glad to see Neil Daswani just started a blog on blogspot.
Reviews: 5 / 5
I found this book as a collection of google-able basic material. The book provides zero guidance to a programmer on the basics for how-to implement security in code not just alphabet soup because “the devil is in the details”. I wrongly picked this book and now it just fills an odd spot of our IT library as this book has no relevance to a Microsoft or Java programmer or Web 2.0 (J*Script) programmer. With Security taking mainstream in every aspect of programming and every component of IT stack – this book did not provide any confidence to an average developer aspiring to securing SOA or J2EE/.NET application. As a whole, the book reflects poorly on the technical content maybe I am not the intended audience of this book.
Reviews: 2 / 5
The best security book I have ever come across. If you want to be great programmer in IT security, then go for this bookand it will lift you to greater hights in your professional
Reviews: 5 / 5
This book is very well written and easy to understand. I like the selection of software security topics it covers – blending of design principles and methodology with a mix of programming techniques.
Upon completion of the book, the reader should have a good basic computer security foundation.
Reviews: 4 / 5