Secure Coding Books

[gem at cigital.com (Gary McGraw)]

Hi all,

I am the editor of the Addison-Wesley Software Security Series.  It includes the Chess/West book "Secure Programming 
with Static Analysis" as well as a bunch of other books.  You can learn about the series here:
http://www.buildingsecurityin.com/

Or on Amazon (though this list is missing "Building Secure Software"):
http://www.amazon.com/gp/series/93344/ref=pd_serl_books?ie=UTF8&edition=paperback

I am always on the lookout for new books for the series.  In particular, I would like to see some good books created on 
software security testing, software security requirements, abuse/misuse cases, architectural risk analysis, and 
possibly even penetration testing.   Who wants to write a book for Addison-Wesley?

Together with SEI/CERT, a new book in the series is almost ready for release.  See more about "Software Security 
Engineering" here:
http://www.amazon.com/Software-Security-Engineering-Project-Managers/dp/032150917X/ref=sr_1_1?ie=UTF8&s=books&qid=1205180964&sr=1-1

gem

company www.cigital.com
podcast www.cigital.com/silverbullet
blog www.cigital.com/justiceleague
book www.swsec.com



On 3/8/08 6:29 AM, "Sebastien Deleersnyder" <seba at deleersnyder.eu> wrote:

There is a list on
http://www.owasp.org/index.php/Education_Module_Good_WebAppSec_Resources

I am currently reading a "Secure Programming with Statical Analysi" which I
like.

Regards

Seba

-----Original Message-----
From: sc-l-bounces at securecoding.org [mailto:sc-l-bounces at securecoding.org]
On Behalf Of Jim Manico
Sent: vrijdag 7 maart 2008 16:40
To: Lawson, David L
Cc: sc-l at securecoding.org
Subject: Re: [SC-L] Secure Coding Books

"How to break web software" is one of the best web security coder-
centric books I have read. Its concise and useful.

Sent from my iPhone

On Mar 7, 2008, at 7:45 AM, "Lawson, David L"
<david.l.lawson at lmco.com> wrote:

> I've read several secure coding books in the past, and was wondering
> if
> anyone has recommendations for secure coding books (preferably from
> the
> last year or two).
>
> Thanks,
>
> David Lawson
> _______________________________________________
> Secure Coding mailing list (SC-L) SC-L at securecoding.org
> List information, subscriptions, etc -
http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php
> SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com
> )
> as a free, non-commercial service to the software security community.
> _______________________________________________
_______________________________________________
Secure Coding mailing list (SC-L) SC-L at securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________


--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.516 / Virus Database: 269.21.6/1317 - Release Date: 7/03/2008
8:15


_______________________________________________
Secure Coding mailing list (SC-L) SC-L at securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________