TY - BOOK AU - Howard, Michael AU - LeBlanc, David TI - Writing Secure Code SN - 9780735617223 U1 - 005.8 PY - 2003/// CY - Washington PB - Microsoft Press KW - Computer Engineering N1 - Part - 1: Contemporary Security The Need for Secure Systems The Proactive Security Development Process Security Principles to Live By Threat Modeling Part - 2: Secure Coding Techniques Public Enemy # 1: The Buffer Overrun Determining Appropriate Access Control Running with Least Privilege Cryptographic Foibles Protecting Secret Data All Input IS Evil! Canonical Representation Issues Database Input Issues Web Specific Input Issues Internationalization Issues Part - 3: Even More Secure Coding Techniques Socket Security Securing RPC, ActiveX Controls and DCOM Protecting Against Denial of Service Attacks Writing Secure .NET Code Part - 4: Special Topics Security Testing Performing a Security code Review Secure Software Installation Building Privacy into Your Application General God Practices Writing Security Documentation and Error Messages ER -