Practical Security

Roman Zabicki has a BA in computer science from the University of Chicago. He's worked in software full-time since 1999. Today he works at Relativity, a Chicago-based software company. At Relativity, he leads the sec ops team within Calder7, Relativity's security team. He's a lifelong Chicagoan and lives in Chicago with his wife Marnie and their children.

出版者:Pragmatic Bookshelf

页数:134

出版时间:2019-2-14

价格:USD 24.00

装帧:Paperback

isbn号码:9781680506341

图书标签:软件工程计算机科学securityprogramming2019

Most security professionals don't have the words "security" or "hacker" in their job title. Instead, as a developer or admin you often have to fit in security alongside your official responsibilities - building and maintaining computer systems. Implement the basics of good security now, and you'll have a solid foundation if you bring in a dedicated security staff later. Identify the weaknesses in your system, and defend against the attacks most likely to compromise your organization, without needing to become a trained security professional.

Computer security is a complex issue. But you don't have to be an expert in all the esoteric details to prevent many common attacks. Attackers are opportunistic and won't use a complex attack when a simple one will do. You can get a lot of benefit without too much complexity, by putting systems and processes in place that ensure you aren't making the obvious mistakes. Secure your systems better, with simple (though not always easy) practices.

Plan to patch often to improve your security posture. Identify the most common software vulnerabilities, so you can avoid them when writing software. Discover cryptography - how it works, how easy it is to get wrong, and how to get it right. Configure your Windows computers securely. Defend your organization against phishing attacks with training and technical defenses.

Make simple changes to harden your system against attackers.

用户评价

太简短的介绍了... 既没知识点, 也不hands-on. 今天问题就出在omniai-ui-server的UIFilter: CSRF in header is not match CSRF in cookie.

太简短的介绍了... 既没知识点, 也不hands-on. 今天问题就出在omniai-ui-server的UIFilter: CSRF in header is not match CSRF in cookie.

太简短的介绍了... 既没知识点, 也不hands-on. 今天问题就出在omniai-ui-server的UIFilter: CSRF in header is not match CSRF in cookie.

太简短的介绍了... 既没知识点, 也不hands-on. 今天问题就出在omniai-ui-server的UIFilter: CSRF in header is not match CSRF in cookie.

太简短的介绍了... 既没知识点, 也不hands-on. 今天问题就出在omniai-ui-server的UIFilter: CSRF in header is not match CSRF in cookie.