Crafting Secure Software: An engineering leader's guide to security by design
Language: English
Published by Packt Publishing, 2024
- Softcover
- New
Seller: Books Puddle, Woodside, NY, U.S.A.Books Puddle
AbeBooks seller since November 22, 2018
Condition: New
£ 71.58
Quantity: 4 available
Add to basketItem description from seller
Print on Demand.
Seller Inventory # 26403478200
- Title
- Crafting Secure Software: An engineering leader's guide to security by design
- Author
- Greg Bulmash; Thomas Segura
- Publisher
- Packt Publishing
- Publication year
- 2024
- Condition
- New
- Binding
- Soft cover
- Language
- English
- ISBN 10
- 1835885063
- ISBN 13
- 9781835885062
Gain a solid understanding of the threat landscape and discover best practices to protect your software factory throughout the SDLC, with valuable insights from security experts at GitGuardian
Key Features
- Develop a strong security posture by grasping key attack vectors in the SDLC
- Implement industry-leading best practices to protect software from evolving threats
- Utilize legislative and regulatory landscapes to mitigate compliance-related costs
Book Description
Drawing from GitGuardian's extensive experience in securing millions of lines of code for organizations worldwide, Crafting Secure Software takes you on an exhaustive journey through the complex world of software security and prepares you to face current and emerging security challenges confidently.
Authored by security experts, this book provides unique insights into the software development lifecycle (SDLC) and delivers actionable advice to help you mitigate and prevent risks. From securing code-writing tools and secrets to ensuring the integrity of the source code and delivery pipelines, you’ll get a good grasp on the threat landscape, uncover best practices for protecting your software, and craft recommendations for future-proofing against upcoming security regulations and legislation.
By the end of this book, you’ll have gained a clear vision of the improvements needed in your security posture, along with concrete steps to implement them, empowering you to make informed decisions and take decisive action in safeguarding your software assets.
What you will learn
- Get to grips with security trends and GitGuardian's role in modern software
- Analyze major security breaches and their impact on the industry
- Develop a threat model tailored to your business and risk appetite
- Implement security measures across your entire SDLC
- Secure secrets within codebases, configurations, and artifacts
- Design and maintain secure build pipelines and deployment setups
- Navigate security compliance, including current and future laws
- Prepare for future security with AI-generated code integration
Who this book is for
This book is an essential read for security and IT leaders navigating the complexities of modern software development. The book is also useful for chief security officers (CSOs), chief information security officers (CISOs), security architects, DevOps professionals, and IT decision makers. A basic understanding of software engineering, version control, and build and delivery mechanisms is needed. This guide will empower you to comprehend and mitigate threats in today's dynamic software factories, regardless of your technical depth.
Table of Contents
- Introduction to the Security Landscape
- The Software Supply Chain and the SDLC
- Securing Your Code-Writing Tools
- Securing Your Secrets
- Securing Your Source Code
- Securing Your Delivery
- Security Compliance and Certification
- Best Practices to Drive Security Buy-In
"Synopsis" may belong to another edition of this title.
About the Author
Greg Bulmash is a karaoke king who started blogging before “blog” was a word. He's picked up both developer certifications and press accreditations, been invited as a speaker to tech conferences on three continents and led a CoderDojo chapter that put on around 150 free STEM education events for Seattle area children. At GitGuardian, he's produced expert-oriented company blogs, externally placed articles, and cartoons for content marketing and thought leadership on cybersecurity best practices, secrets management, software supply chain security, cybersecurity legislation & regulation.
Thomas Segura is a seasoned technical writer and former DevOps engineer passionate about bridging the gap between security teams and developers. After developing microservices for smart grids at a major energy company, Thomas joined GitGuardian, a leading code security innovator, in 2021. As a technical content writer, he produces in-depth material on application and cloud security best practices. His notable works include the "State of Secrets Sprawl" report and the Secrets Management Maturity Model. Thomas's insights have been featured on Hacker News, DevOps, and HelpNetSecurity. Through his writing, he shapes the conversation around modern software security, emphasizing collaboration between development and security teams.
"About the title" may belong to another edition of this title.
Books Puddle
Woodside, NY, U.S.A.
AbeBooks seller since November 22, 2018
Shipping rates within U.S.A.
| Item | 12 to 19 business days | 12 to 14 business days |
|---|---|---|
| First item | £ 2.98 | £ 5.23 |
Payment methods
Store description
I mainly carry imported books from South East Asia / South Asia for readers of all Age Groups.
Specialty
South Asian and South East Asian Culture, Religion, Art etcSeller's business information
PLETOS INC
6931 51st Avenue, WOODSIDE
Woodside, NY U.S.A. 11377
Terms of sale
We accept return for those books which are received damamged. Though we take appropriate care in packaing to avoid such situation.
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to Books Puddle, Woodside, New York, U.S.A., without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.