O'Reilly logo

Enterprise Software Security: A Confluence of Disciplines by Dan S. Peters, Mark G. Graff, Diana L. Burley, Kenneth R. van Wyk

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

1. Introduction to the Problem

Your authors have been at “this security stuff” for more than 20 years. At various points during that time, we have been on the front lines of two key struggles, writing secure code and securing enterprises from attack—often after the fact, as a result of incident response operations. Over this time, we have seen good progress in both arenas. Yet when we examine the common software produced today, and the way our enterprises are protected, we find egregious flaws and serious risks. We find mistakes and pitfalls that have been well understood and well documented for many years (even, in some cases, decades). We also see new threats and ingenious new attacks. Worse still, as programmers, enterprise security practitioners, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required