Software Security

In this comprehensive guide, authors Kelly Shortridge and Aaron Rinehart help you navigate the challenges of sustaining resilience in complex software systems by using the principles and practices of security chaos engineering. By preparing for adverse events, you can ensure they don't disrupt your ability to innovate, move quickly, and achieve your engineering and business goals.

"Software Security" is an intensive, practical, and modern guide engineered for the next generation of software developers, architects, and engineers. It serves as a definitive textbook for undergraduate and graduate computer science courses, meticulously aligned with the curricula of leading universities in the USA and worldwide. This book moves beyond abstract theory to provide a direct, hands-on methodology for building secure and resilient software systems from the ground up. It serves as a core text for courses on software security, secure coding, and application security, adhering ...

2025 3rd Edition Master Cybersecurity, Protect Your Data, and Advance Your Career—Now with AI-Powered Support 📈 Do traditional cybersecurity books overwhelm you with dry theory and complex jargon? Looking for a clear, streamlined guide that helps you build real-world skills—fast? Prefer learning through practical strategies, hands-on labs, and expert-driven tools? Now, with the powerful addition of AI Mentor Pro, you'll have a 24/7 digital mentor by your side to explain concepts, answer questions, and coach you through every challenge on your path to success. Why Choose This Guide? ...

Immerse yourself in the world of software security with the new eBook "Secure Development." This comprehensive guide provides meticulous insights into the creation of secure, resilient applications, addressing common misconceptions and guiding you through the foundations of application security. Learn to understand, anticipate, and mitigate application attacks, and master the basic principles of creating a robust defense system for your software. Delve into the specifics of secure designing that can inhibit cyber attackers from exploiting your application. From minimizing the attack surface...

Learn application security from the very start with this comprehensive and approachable guide. Alice and Bob Learn Application Security is an accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development. This book covers all the basic subjects such as threat modeling and security testing, but also dives deep into more complex and advanced topics for securing modern software systems and architectures.

Maintaining secrets, credentials, and machine identities in secure ways is an important, though often overlooked, aspect of secure software development. DevOps security often addresses vulnerabilities, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy integrated in your code, infrastructure, and environments from day one can help.

Unlock the skills of a professional penetration tester and discover how to identify and close the same security gaps hackers look for every day. Penetration PEN Testing Like a Pro gives you a complete, practical roadmap for mastering both software and hardware testing techniques. Inside, you’ll find 50 essential skills and workflows that cover everything from network scanning and wireless testing to web application security, social engineering, and cloud assessments. Each skill is explained in plain language, with step-by-step methods that make even advanced concepts clear and easy to ...

Dive into the world of programming with "The Art of C Programming" - a comprehensive guide that will empower you to unleash the full potential of the powerful C programming language. If you're a beginner embarking on your coding journey or an experienced programmer seeking to improve your skills, this eBook has got you covered! The Art of C Programming meticulously takes you through a vast range of C programming concepts that cover everything from syntax, datatypes, and variables, to advanced topics such as multithreading, networking applications, and graphical user interfaces. This ...

If you work anywhere near software, you already know the hard part is not memorizing vocabulary. The hard part is making secure choices under real constraints, explaining those choices to others, and repeating the process across a long and messy life cycle. CSSLP For Busy People is built for that reality and aimed directly at the ISC2 CSSLP exam. This book is for people who have jobs, projects, and deadlines, but still want a confident, structured approach to exam readiness. You will build a working mental model for secure software practices so you can read a question, spot what it is ...

CSSLP Flash Cards is built for one purpose: fast, repeatable practice that strengthens recall and judgment for the ISC2 CSSLP exam. It takes the content from CSSLP For Busy People and transforms it into 1,000 practice flashcards designed to reinforce exam readiness through repetition. This book is for solo learners who want a simple daily routine, for busy professionals who study in short windows, and for anyone doing last-mile review before exam day. It also works well for commuters and travelers because it supports “open anywhere” practice without needing a long setup. The flashcards ...

In this groundbreaking book, "Cloud Databases Unleashed: Harnessing the Power of Scalable Data Management," you will embark on a transformative journey into the world of cloud-based software development, data analytics, and security. Discover how cloud databases are revolutionizing the way applications are built, deployed, and scaled, and learn how to leverage their full potential to drive innovation and accelerate business growth. From understanding the fundamentals of cloud computing to exploring agile software development methodologies, this book provides a comprehensive overview of the ...

The catastrophic failures of Heartbleed, Log4Shell, and the XZ Utils backdoor were not isolated incidents. They were warning shots. They were symptoms of a much deeper and more dangerous crisis: our digital world is built on the unrecognised, uncompensated, and unsustainable labour of a handful of "accidental gatekeepers". The “free” and open-source software that powers our governments, banks, and critical national infrastructure isn’t free, it’s running on a hidden debt of human burnout that is about to come due. In The Value Chasm, you will discover the profound market failure at ...

If you are trying to build real tech competence while balancing work, family, and everything else, you do not need a massive textbook. You need a clear path through the fundamentals, written in plain English, with enough structure to keep you moving forward even on the weeks when study time is scarce. Tech+ For Busy People is designed to help you develop the core knowledge that the CompTIA Tech+ exam expects, while also building the everyday understanding that makes entry-level technology work feel less mysterious. The goal is simple: turn scattered “I’ve heard of that” familiarity ...

As a public good, open-source software is supported by diverse and wide-ranging communities—which are composed of individual maintainers, non-profit software foundations, and corporate stewards. CISA must integrate into and support these communities, with a particular focus on the critical OSS components that the federal government and critical infrastructure systems rely upon.

Docker in Action teaches listeners how to create, deploy, and manage applications hosted in Docker containers. After starting with a clear explanation of the Docker model, you will learn how to package applications in containers, including techniques for testing and distributing applications. You will also learn how to run programs securely and how to manage shared resources. Using carefully designed examples, the book teaches you how to orchestrate containers and applications from installation to removal.

The Art of the API: Building Future-Proof Software from Code to Agentic AI This book takes you from Foundations to the Future of Intelligent Systems APIs are no longer just developer tools—they are the backbone of modern software, powering everything from mobile apps and cloud platforms to automated systems and AI-driven solutions. The Art of the API is your practical guide to understanding, designing, and building APIs that scale, adapt, and create real business value. In this book, you’ll start with the fundamentals—what APIs are, why they matter, and how they have evolved into the ...

📘 Access Control Systems Handbook: Design, Integration, and Sample Layouts for Commercial and Residential Security Unlock the full potential of modern security with this comprehensive guide to access control system design, installation, and programming. Whether you're a security integrator, electrical engineer, IT professional, or facility manager, this handbook is your go-to resource for building code-compliant, scalable, and future-ready access control solutions. ✔ What You'll Learn: Fundamental principles of access control and physical security Detailed breakdowns of components: ...

Duqu, the infamous malware from the Stuxnet family, made its return. First discovered in October 2011, Duqu was actively spying on digital certificate issuing authority in Hungary. As soon as it was exposed, the malware was abandoned by its originators. Information security companies added it to a “blacklist” database of anti-virus software. After that initial discovery, Duqu had been out of the spotlight for almost four years, until one of the biggest names in cyber-security, Kaspersky Lab, announced that it had detected the presence of the Duqu malware. On June 10, 2015, Kaspersky Lab...

Are you ready to become an Ubuntu master? Look no further than "Mastering Ubuntu: A Comprehensive Guide to Linux's Favorite Distribution." This comprehensive guide is the perfect resource for anyone looking to gain a deep understanding of Ubuntu, from beginners to experienced users. With clear and concise explanations, practical examples, and hands-on exercises, this book will guide you through every aspect of Ubuntu, from installation and configuration to advanced system administration, network setup, and security. "Mastering Ubuntu" covers all the essential topics, including package ...

CCTV Systems Handbook: Design, Installation, and Sample Layouts for Homes, Offices, and Public Spaces The Complete Guide to Video Surveillance Systems Are you planning to install a video surveillance system but don’t know where to start? Whether you're a security professional, systems integrator, property manager, or DIY enthusiast, this book provides the practical knowledge and tools needed to design and deploy effective CCTV systems in any environment. In this comprehensive guide, you’ll learn how to: Understand the core components of modern surveillance systems Choose the right ...