{"product_id":"9780321822130-secure-coding-in-c-and-c","title":"Secure Coding in C and C++","description":"\u003cmeta content=\"text\/html; charset=utf-8\" http-equiv=\"Content-Type\"\u003e\u003cp\u003e\u003cspan\u003e\u003cp\u003e\u003cstrong\u003eLearn the Root Causes of Software Vulnerabilities and How to Avoid Them\u003c\/strong\u003e\u003c\/p\u003e \u003cp\u003eCommonly exploited software vulnerabilities are usually caused by avoidable software defects. Having analyzed tens of thousands of vulnerability reports since 1988, CERT has determined that a relatively small number of root causes account for most of the vulnerabilities.\u003c\/p\u003e \u003cp\u003e\u003cstrong\u003e\u003cem\u003eSecure Coding in C and C++, Second Edition, \u003c\/em\u003e\u003c\/strong\u003eidentifies and explains these root causes and shows the steps that can be taken to prevent exploitation. Moreover, this book encourages programmers to adopt security best practices and to develop a security mindset that can help protect software from tomorrow’s attacks, not just today’s. Drawing on the CERT’s reports and conclusions, Robert C. Seacord systematically identifies the program errors most likely to lead to security breaches, shows how they can be exploited, reviews the potential consequences, and presents secure alternatives.\u003c\/p\u003e \u003cp\u003e\u003cstrong\u003eCoverage includes technical detail on how to\u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e\n\u003cli\u003eImprove the overall security of any C or C++ application\u003c\/li\u003e\n\u003cli\u003eThwart buffer overflows, stack-smashing, and return-oriented programming attacks that exploit insecure string manipulation logic\u003c\/li\u003e\n\u003cli\u003eAvoid vulnerabilities and security flaws resulting from the incorrect use of dynamic memory management functions\u003c\/li\u003e\n\u003cli\u003eEliminate integer-related problems resulting from signed integer overflows, unsigned integer wrapping, and truncation errors\u003c\/li\u003e\n\u003cli\u003ePerform secure I\/O, avoiding file system vulnerabilities\u003c\/li\u003e\n\u003cli\u003eCorrectly use formatted output functions without introducing format-string vulnerabilities\u003c\/li\u003e\n\u003cli\u003eAvoid race conditions and other exploitable vulnerabilities while developing concurrent code\u003c\/li\u003e\n\u003c\/ul\u003e \u003cp\u003e\u003cstrong\u003eThe second edition features\u003c\/strong\u003e\u003c\/p\u003e \u003cul\u003e\n\u003cli\u003eUpdates for C11 and C++11\u003c\/li\u003e\n\u003cli\u003eSignificant revisions to chapters on strings, dynamic memory management, and integer security\u003c\/li\u003e\n\u003cli\u003eA new chapter on concurrency\u003c\/li\u003e\n\u003cli\u003eAccess to the online secure coding course offered through Carnegie Mellon’s Open Learning Initiative (OLI)\u003c\/li\u003e\n\u003c\/ul\u003e \u003cp\u003e\u003cstrong\u003e\u003cem\u003eSecure Coding in C and C++, Second Edition, \u003c\/em\u003e\u003c\/strong\u003epresents hundreds of examples of secure code, insecure code, and exploits, implemented for Windows and Linux. If you’re responsible for creating secure C or C++ software–or for keeping it safe–no other book offers you this much detailed, expert assistance.\u003c\/p\u003e\n\u003cbr\u003e\u003c\/span\u003e\u003c\/p\u003e","brand":"Rarewaves","offers":[{"title":"Default Title","offer_id":40112317956193,"sku":"9780321822130","price":46.85,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0092\/7504\/8033\/products\/7383a086b6dae12618a5f6ff966e14f6.jpg?v=1674711889","url":"https:\/\/www.rarewaves.com\/products\/9780321822130-secure-coding-in-c-and-c","provider":"Rarewaves.com","version":"1.0","type":"link"}