Hacking the Code: Auditor's Guide to Writing Secure Code for the Web - Hardcover

Burnett, Mark

Hardcover

ISBN 10: 1932266658 ISBN 13: 9781932266658

Publisher: Syngress, 2004

Synopsis

Hacking the Code has over 400 pages of dedicated exploit, vulnerability, and tool code with corresponding instruction. Unlike other security and programming books that dedicate hundreds of pages to architecture and theory based flaws and exploits, Hacking the Code dives right into deep code analysis. Previously undisclosed security research in combination with superior programming techniques from Foundstone and other respected organizations is included in both the Local and Remote Code sections of the book.

The book is accompanied with a FREE COMPANION CD containing both commented and uncommented versions of the source code examples presented throughout the book. In addition to the book source code, the CD also contains a copy of the author-developed Hacker Code Library v1.0. The Hacker Code Library includes multiple attack classes and functions that can be utilized to quickly create security programs and scripts. These classes and functions simplify exploit and vulnerability tool development to an extent never before possible with publicly available software.

• Learn to quickly create security tools that ease the burden of software testing and network administration
• Find out about key security issues regarding vulnerabilities, exploits, programming flaws, and secure code development
• Discover the differences in numerous types of web-based attacks so that developers can create proper quality assurance testing procedures and tools
• Learn to automate quality assurance, management, and development tasks and procedures for testing systems and applications
• Learn to write complex Snort rules based solely upon traffic generated by network tools and exploits

About this title

Synopsis

"Hacker Code" will have over 400 pages of dedicated exploit, vulnerability, and tool code with corresponding instruction. Unlike other security and programming books that dedicate hundreds of pages to architecture and theory based flaws and exploits, "HC1" will dive right into deep code analysis. Previously undisclosed security research in combination with superior programming techniques from Foundstone and other respected organizations will be included in both the Local and Remote Code sections of the book. The book will be accompanied with a free companion CD containing both commented and uncommented versions of the source code examples presented throughout the book. In addition to the book source code, the CD will also contain a copy of the author-developed Hacker Code Library v1.0. The Hacker Code Library will include multiple attack classes and functions that can be utilized to quickly create security programs and scripts. These classes and functions will simplify exploit and vulnerability tool development to an extent never before possible with publicly available software.

You can: learn to quickly create security tools that ease the burden of software testing and network administration; find out about key security issues regarding vulnerabilities, exploits, programming flaws, and secure code development; discover the differences in numerous types of web-based attacks so that developers can create proper quality assurance testing procedures and tools; learn to automate quality assurance, management, and development tasks and procedures for testing systems and applications; and, learn to write complex Snort rules based solely upon traffic generated by network tools and exploits.

Edition details

• Publisher: Syngress
• Publication date: 2004
• Language: English
• ISBN 10: 1932266658
• ISBN 13: 9781932266658
• Binding: Hardcover
• Number of pages: 550