Skip to Content
24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
book

24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them

by Michael Howard, David LeBlanc, John Viega
September 2009
Intermediate to advanced
464 pages
9h 58m
English
McGraw-Hill
Content preview from 24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them

SIN 15NOT UPDATING EASILY

OVERVIEW OF THE SIN

Most software needs to be updated at some point during the supported lifespan, whether this is for a bug fix, for a service pack, as a minor update, or to fix a security bug. There are different problems to consider, depending on whether the software is being used by home users, by enterprise users, or on servers.

Different types of applications have different updating needs. Two extreme examples are anti-malware software, which could entail an update every few days, and online games, where there is a constant game of chess between some users trying to cheat and the software vendor attempting to prevent cheats to maintain game balance. If your threat model involves trying to prevent admin-level ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Take Control of iOS & iPadOS Privacy and Security, 2nd Edition

Take Control of iOS & iPadOS Privacy and Security, 2nd Edition

Glenn Fleishman

Publisher Resources

ISBN: 9780071626750