Sharks in the Moat

How to Create Truly Secure Software

De: Phil Martin

Narrado por: Phil Martin

Believe it or not, there is a striking similarity between medieval castle design and how we protect networks and data in the 21st century. By examining how our ancestors fought off invading armies, it becomes much easier to understand the latest strategies for keeping hackers at bay.

This audiobook is designed for anyone who wants to understand how to create and deploy secure software that can stand up to the most malevolent attacks by the bad guys. Whether you are a PM, product owner, developer, architect, tester, DevOps, or infrastructure team member, DBA, engineering manager, security manager, in charge of change management or even a security auditor - there is a mountain of information for you specifically. Obviously, since this is an audiobook on creating secure software, the developer and architect roles have the bulk of the information.

As a bonus, once you finish listening to the content inside, you will be more than prepared to take the Certified Secure Software Lifecycle Professional exam, or CSSLP exam, if you wish to do so.

©2019 Nonce Corp (P)2019 Nonce Corp

Very extensive

I was happy with the content until I heard a mistake on REST verbs POST is to create not PUT and viceversa. Not sure if I can trust all the content now.

A Challenging Listen...But Very Useful

If you are really interested doing software development securely, or if you are responsible for any type of digital security, this is a great place to start. The book has security lessons applicable in a much wider sphere than just software development.

Some observations:

Has a great "ear-catching" introduction using medieval castle security as an illustration to launch the book. The author might have brought the book full circle and finished it off with a reference back to that illustration at then end, but he chose not to do that. That would have been fun.

Not professionally narrated( it is read by the author), but it was truly necessary to have the content expert deliver the performance.

Has a very innovative system of little sound effects to highlight the items in the many series of bullet points, etc. I've never heard anything like it in an audio book. I thought it was helpful.

Not an easy listen, the acronym density is very high.

Provides the essentials in just the right amount of detail to introduce the listener to the topic.

I will challenge myself to listen to this again in a few months. A difficult, but very useful listen.