Foundations Of Security

Security Goals Secure Systems Design Secure Design Principles Exercises for Part 1 Worms and Other Malware Buffer Overflows Client-State Manipulation SQL Injection Password Security Cross-Domain Security in Web Applications Exercises for Part 2 Symmetric Key Cryptography Asymmetric Key Cryptography Key Management and Exchange MACs and Signatures Exercises for Part 3

Neil Daswani, Ph.D, has served in a variety of research, development, teaching, and managerial roles at Stanford University, Yodlee, and Bellcore (now Telcordia Technologies). His areas of expertise include software and network security, wireless data technology, and peer-to-peer systems. He has published extensively in these areas, frequently gives talks at industry and academic conferences, and has been granted three U.S. patents. He received a Ph.D. in Computer Science from Stanford University, and currently works for Google. He also holds a M.S. in Computer Science from Stanford University, and a B.S. in Computer Science with honors with distinction from Columbia University.

Anita Kesavan is a freelance writer and received her M.F.A. in Creative Writing from Sarah Lawrence College. She also holds a B.A. in English from Illinois-Wesleyan University. She specializes in communicating complex technical ideas in simple, easy-to-understand language.

Christoph Kern is an Information Security Engineer at Google, and was previously a Senior Security Architect at Yodlee, a provider of technology solutions to the financial services industry. He has extensive experience in performing security design reviews and code audits, designing and developing secure applications, and helping product managers and software engineers effectively mitigate security risks in their software products.

From the reviews:"It is written based on a course for beginning programmers. ... The book has three main parts: security design principles, secure programming techniques, and an introduction to cryptography. ... Exercises are included at the end of each part in order to provide suggestions for getting hands-on experience." (A. Mariën, ACM Computing Reviews, Vol. 49 (5), May, 2008)