Core Software Security

Contents

Dedication

Foreword by Hon. Howard A. Schmidt

Preface

Acknowledgments

About the Authors

Chapter 1 Introduction

1.1 The Importance and Relevance of Software Security

1.2 Software Security and the Software Development Lifecycle

1.3 Quality Versus Secure Code

1.4 The Three Most Important SDL Security Goals

1.5 Threat Modeling and Attack Surface Validation

1.6 Chapter Summary—What to Expect from This Book

References

Chapter 2 The Secure Development Lifecycle

2.1 Overcoming Challenges in Making Software Secure

2.2 Software Security Maturity Models

2.3 ISO/IEC 27034—Information Technology—Security Techniques—Application Security

2.4 Other Resources for SDL Best Practices

2.4.1 SAFECode

2.4.2 U.S. Department of Homeland Security Software Assurance ...