Rating:
(2 reviews)
Author: Visit Amazon's Mark S. Merkow Page
ISBN : 143982696X
New from $76.80
Format: PDF
Direct download links available Free Secure and Resilient Software Development for everyone book 4shared, mediafire, hotfile, and mirror link
Review
... provides a strong foundation for anyone getting started in application security. Most application security books fall into two categories: business-oriented and vague or ridiculously super technical. Mark and Laksh draw on their extensive experience to bridge this gap effectively. The book consistently links important technical concepts back to the business reasons for application security with interesting stories about real companies dealing with application security issues.
-Jeff Williams, Chair, The OWASP Foundation
About the Author
Mark S. Merkow, CISSP, CISM, CSSLP, works at PayPal Inc. (an eBay company) in Scottsdale, Arizona, as Manager of Security Consulting and IT Security Strategy in the Information Risk Management area. Mark has over 35 years of experience in information technology in a variety of roles, including applications development, systems analysis and design, security engineer, and security manager. Mark holds a Masters in Decision and Info Systems from Arizona State University (ASU), a Masters of Education in Distance Learning from ASU, and a BS in Computer Info Systems from ASU. In addition to his day job, Mark engages in a number of extracurricular activities, including consulting, course development, online course delivery, writing e-business columns, and writing books on information technology and information security.
Mark has authored or co-authored nine books on IT and has been a contributing editor to four others.
Mark remains very active in the information security community, working in a variety of roles for the Financial Services Information Sharing and Analysis Center (FS-ISAC), the Financial Services Technology Consortium (FSTC), and the Financial Services Sector Coordinating Council (FSCCC) on Homeland Security and Critical Infrastructure Protection.
Lakshmikanth Raghavan (Laksh) works at PayPal Inc. (an eBay company) as Staff Information Security Engineer in the Information Risk Management area. He has over eight years of experience in the areas of information security and information risk management and has been providing consulting services to Fortune 500 companies and financial services companies around the world in his previous stints. He is a Certified Ethical Hacker (CEH) and also maintains the Certified Information Security Manager (CISM) certificate from ISACA (previously known as the Information Systems Audit and Control Association). Laksh holds a Bachelor's degree in Electronics & Telecommunication Engineering from the University of Madras, India. Laksh enjoys writing security-related articles and has spoken on the various dimensions of software security at industry forums and security conferences.
Books with free ebook downloads available Free Secure and Resilient Software Development Hardcover
- Hardcover: 392 pages
- Publisher: Auerbach Publications; 1 edition (June 16, 2010)
- Language: English
- ISBN-10: 143982696X
- ISBN-13: 978-1439826966
- Product Dimensions: 1 x 6.2 x 9.2 inches
- Shipping Weight: 1.5 pounds (View shipping rates and policies)
Free Secure and Resilient Software Development
"Secure and Resilient Software Development" by Mark Merkow and Laksh Raghavan is a really good book. It addresses a key security area that is generally given short shrift, even though purportedly more than 70 percent of breaches result from attacks on the application layer. The book is one of only a handful of texts about information security written by practitioners for practitioners. Even fewer practitioner books address software security ... and most of those have been written or co-authored by Mark Merkow! The majority of publications in the field of software security are written by academics or vendors' employees, both of whom have their own agenda. The former group is dominated by publishing or perishing; whereas the latter generally promote particular products or methodologies supplied by their employers. The true value of Mark and Laksh's book is that it is both impartial and extremely informative.
The book is comprehensive. It covers areas with which most infosec professionals and software developers are not likely to be familiar. For example, the authors recount the history of application security testing as far back as the Orange Book and Common Criteria (CC). Incidentally, Mark co-authored an excellent book on the CC, namely "Computer Security Assurance Using the Common Criteria" (Thomson, 2005). In the current book, issues with the CC approach are raised ... and by someone who should know!
Among the many useful chapters, I personally derived the most from Chapters 8 and 9, which are about testing custom applications and commercial-off-the-shelf software respectively. I also was interested in reading Chapter 11 on metrics and maturity models.
-
Download Link 2