Software Security

CSSLP for Busy People: The Busy Candidate’s Playbook for Passing the ISC2 CSSLP Exam Building secure software requires more than writing good code. It demands understanding how security decisions affect requirements, architecture, development, testing, deployment, and maintenance. Preparing for the ISC2 Certified Secure Software Lifecycle Professional (CSSLP) exam means mastering these interconnected concepts while learning to recognize the best security decision in challenging scenarios. Understand Secure Software Development Without Getting Lost in Complexity Written by Dr Jason Edwards...

2025 3rd Edition Master Cybersecurity, Protect Your Data, and Advance Your Career—Now with AI-Powered Support 📈 Do traditional cybersecurity books overwhelm you with dry theory and complex jargon? Looking for a clear, streamlined guide that helps you build real-world skills—fast? Prefer learning through practical strategies, hands-on labs, and expert-driven tools? Now, with the powerful addition of AI Mentor Pro, you'll have a 24/7 digital mentor by your side to explain concepts, answer questions, and coach you through every challenge on your path to success. Why Choose This Guide? ...

"Software Security" is an intensive, practical, and modern guide engineered for the next generation of software developers, architects, and engineers. It serves as a definitive textbook for undergraduate and graduate computer science courses, meticulously aligned with the curricula of leading universities in the USA and worldwide. This book moves beyond abstract theory to provide a direct, hands-on methodology for building secure and resilient software systems from the ground up. It serves as a core text for courses on software security, secure coding, and application security, adhering ...

Secure Computing Systems provides a clear, structured introduction to modern system security for postgraduate students, computing students, early-career security professionals, and practitioners who want a stronger foundation in secure development, assessment, defence, incident response, and digital forensics. Security is not something that can be added at the end of a project. It has to be considered across the whole lifecycle: from requirements and design, through coding and assessment, into live operation, incident handling, and evidence-based improvement. This book treats secure ...

Clean Architecture is an essential book for every current or aspiring software architect, systems analyst, system designer, and software manager - and for every programmer who must execute someone else’s designs. 

Agentic Programming with AI Agents: A Practical Software Engineering Guide to Tool-Calling Agents, Planning Systems, Memory, Evaluation, Security, and Production Deployment AI agents are no longer experimental demos. Developers, engineers, and technical teams now need agents that can call tools, follow plans, manage context, remember useful information, evaluate outputs, handle failures, and run safely in production. But building reliable AI agents is not as simple as connecting an LLM to an API. Are your prototypes impressive but fragile? Do your agents break when workflows get longer, ...

If you are trying to build real tech competence while balancing work, family, and everything else, you do not need a massive textbook. You need a clear path through the fundamentals, written in plain English, with enough structure to keep you moving forward even on the weeks when study time is scarce. Tech+ For Busy People is designed to help you develop the core knowledge that the CompTIA Tech+ exam expects, while also building the everyday understanding that makes entry-level technology work feel less mysterious. The goal is simple: turn scattered “I’ve heard of that” familiarity ...

Maintaining secrets, credentials, and machine identities in secure ways is an important, though often overlooked, aspect of secure software development. DevOps security often addresses vulnerabilities, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy integrated in your code, infrastructure, and environments from day one can help.

In this comprehensive guide, authors Kelly Shortridge and Aaron Rinehart help you navigate the challenges of sustaining resilience in complex software systems by using the principles and practices of security chaos engineering. By preparing for adverse events, you can ensure they don't disrupt your ability to innovate, move quickly, and achieve your engineering and business goals.

Learn application security from the very start with this comprehensive and approachable guide. Alice and Bob Learn Application Security is an accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development. This book covers all the basic subjects such as threat modeling and security testing, but also dives deep into more complex and advanced topics for securing modern software systems and architectures.

The castle-and-moat security model is dead. In a landscape defined by decentralized hybrid work, multi-cloud enterprise architectures, and autonomous agentic AI threat vectors, the traditional network perimeter has entirely vaporized. Once an attacker breaches the outer walls of a legacy system, they are granted lateral freedom to move across asset classes and weaponize core data with absolute impunity. The Zero Trust Architect is your authoritative technical playbook for modern enterprise defense. Moving past generic marketing hype, this guide bridges the critical gap between high-level ...

Immerse yourself in the world of software security with the new eBook "Secure Development." This comprehensive guide provides meticulous insights into the creation of secure, resilient applications, addressing common misconceptions and guiding you through the foundations of application security. Learn to understand, anticipate, and mitigate application attacks, and master the basic principles of creating a robust defense system for your software. Delve into the specifics of secure designing that can inhibit cyber attackers from exploiting your application. From minimizing the attack surface...

Duqu, the infamous malware from the Stuxnet family, made its return. First discovered in October 2011, Duqu was actively spying on digital certificate issuing authority in Hungary. As soon as it was exposed, the malware was abandoned by its originators. Information security companies added it to a “blacklist” database of anti-virus software. After that initial discovery, Duqu had been out of the spotlight for almost four years, until one of the biggest names in cyber-security, Kaspersky Lab, announced that it had detected the presence of the Duqu malware. On June 10, 2015, Kaspersky Lab...

This book explores cybersecurity in industrial and operational technology (OT) environments in depth, addressing the challenges, threats, and protection strategies in critical infrastructures. From identifying vulnerabilities to implementing advanced security models, it analyzes real cases of cyberattacks, key regulations, and emerging trends in the protection of industrial control systems. With a practical and strategic approach, it offers essential recommendations to strengthen the resilience of organizations to the growing cyber threats in an increasingly digitalized and interconnected ...

We have been taught how to use the internet, but we have never been taught how the internet uses us. We live in a world where our most private thoughts, financial records, and personal identities are stored on glass screens and remote servers. Yet, the vast majority of people navigating this digital landscape are completely blind to the invisible architecture running beneath their fingertips. Decoding Cybersecurity is the definitive guide to the reality of modern digital security. It provides a practical, eye-opening look at the mechanics of the digital world and the invisible threats we ...

Docker in Action teaches listeners how to create, deploy, and manage applications hosted in Docker containers. After starting with a clear explanation of the Docker model, you will learn how to package applications in containers, including techniques for testing and distributing applications. You will also learn how to run programs securely and how to manage shared resources. Using carefully designed examples, the book teaches you how to orchestrate containers and applications from installation to removal.

The apocalypse won't arrive with a mushroom cloud. It'll arrive as a Tuesday. A settlement batch that doesn't clear. A vendor portal down for maintenance nobody scheduled. A reconciliation mismatch nobody can explain. If the financial system ever fails in a way that reaches you, this is what it will look like — because this is what it is made of. And in 2025, the economics underneath that machinery changed: AI stopped helping attackers and started being one. In one documented campaign, a model executed the overwhelming majority of tactical operations against roughly thirty organizations ...

Are you ready to become an Ubuntu master? Look no further than "Mastering Ubuntu: A Comprehensive Guide to Linux's Favorite Distribution." This comprehensive guide is the perfect resource for anyone looking to gain a deep understanding of Ubuntu, from beginners to experienced users. With clear and concise explanations, practical examples, and hands-on exercises, this book will guide you through every aspect of Ubuntu, from installation and configuration to advanced system administration, network setup, and security. "Mastering Ubuntu" covers all the essential topics, including package ...

This book is a comprehensive guide for candidates preparing for the CompTIA A+ 220-1102 (Core 2) Exam, focusing on operating systems, security, software troubleshooting, networking, and best practices in IT support. It provides in-depth coverage of essential concepts, practical troubleshooting techniques, security measures, and professional operational procedures required for IT professionals. The book starts with an introduction to the CompTIA A+ certification, outlining the exam objectives, study strategies, and key domains covered in Core 2. It then delves into operating system ...

In today's rapidly evolving technological landscape, application security has taken center stage. As digital threats grow, protecting your software from vulnerabilities isn't just an option; it's a necessity. DevSecOps in Action by Ravi Rajput provides a comprehensive guide for embedding security into every facet of software lifecycle. Need ≫ As businesses adopt DevOps for faster delivery, security becomes even more critical. It's no longer an afterthought but an integral part of the development process. With rising cyber threats, integrating security into the DevOps process from day one ...