Re: Writing Secure code

From: Bob Bruen (coldrainat_private)
Date: Fri Dec 27 2002 - 15:16:39 PST

  • Next message: John Viega: "Re: Writing Secure code" 

    Hi folks,

 Here is a list of related books:

1) Anderson, Ross. Security Engineering. Wiley 2001. 
2) Birman, Kenneth. Building Secure and Reliable Network
    Applications. Manning 1996. 
3) Black, Uyless. Internet Security Protocols. Prentice Hall 2001. 
4) Blakley, Bob. CORBA Security. An Introduction to Safe Computing with
    Objects. Addison-Wesley 2000. ISBN0-201-32565-9. 
5) Brown, Keith. Programming Windows Security. Addison Wesley
     2000. ISBN0201604426. 
6) Chapman, Davis. Developing Secure Applications with Visual
    Basic. 2000 Sams. ISBN: 0672318369  
7) Howard, Michael. Designing Secure Web-Based Applications for
     Microsoft Windows 2000 2000. Microsoft Press; ISBN:
     0-735-60995-0 
8) Howard, Michael and David Leblanc Writing Secure Code (With
     CD-ROM) Microsoft Press, 2002 ISBN: 0-772-86435-4. 
9) Leveson, Nancy. Safeware. System Safety and Computers. Addison-Wesley
     1995. ISBN 0-201-11972-2. 
10) Ramachandran, Jay. Designing Security Architecture Solutions. Wiley
     2002. ISBN 0-471-20602-4 
11) Rescorla, Eric. SSL and TSL. Designing and Building Secure
     Systems. Addison Wesley 2001. 
12) Ryan, Peter and Steve Schneider. Modelling and Analysis of Security
     Protocols. Addison-Wesley 2001. ISBN 0-201-67471-8. 
13) Storey,Neil. Safety Critical Computer Systems. Addison-Wesley
     1996. ISBN 0-201-42787-7. 
14) Viega, John and Gary Mcgraw. Building Secure Software. How to Avoid
     Security Problems the Right Way. Addison-Wesley 2002. 
15) Voas, Jeffrey and Gary McGraw. Software Fault Injection: Innoculating
     Programs Against Errors. John Wiley & Sons 1997. ISBN0-471-18381-4 

                    cheers, bob

On Fri, 27 Dec 2002, Rahul Chander Kashyap wrote:

> Hi people,
> 
> I've been going through some articles on how to write secure code esp.
> from: http://www.shmoo.com/securecode/
> 
> I am looking for something more specific for the windows platform. Are
> there any specific guidelines/standards that one could follow?
> 
> And one more thing...<this one might be intresting ;-)>  Is it possible 
> to write code that is completely secure and not exploitable? 
>  
> Thanks for parsing thru my mail :-) 
> 
> Regards,
> 
> Rahul Kashyap
> 
> www.nsecure.net
> ------------------------
> Layered Defence
> ------------------------
> 
>

    This archive was generated by hypermail 2b30 : Fri Dec 27 2002 - 22:05:25 PST