Secure Coding in C and C++ (Paperback)
Robert C. Seacord
- 出版商: Addison Wesley
- 出版日期: 2005-09-19
- 售價: $2,160
- 貴賓價: 9.5 折 $2,052
- 語言: 英文
- 頁數: 368
- 裝訂: Paperback
- ISBN: 0321335724
- ISBN-13: 9780321335722
-
相關分類:
C 程式語言、C++ 程式語言
-
其他版本:
Secure Coding in C and C++, 2/e (Paperback)
買這商品的人也買了...
-
Visual C#.NET 程式設計經典$650$553 -
ASP.NET 程式設計徹底研究$590$466 -
建構嵌入式 Linux 系統$780$616 -
最新 JavaScript 完整語法參考辭典 第三版$490$382 -
$874Computer Science Illuminated, 2/e -
Windows CE.NET 程式設計 (Programming Microsoft Windows CE .Net, 3/e)$890$703 -
ASP.NET 徹底研究進階技巧─高階技巧與控制項實作$650$507 -
Head First Servlets & JSP：SCWCD 專業認證指南 (Head First Servlets & JSP)$880$748 -
計算機組織與設計 (Computer Organization and Design: The Hardware/Software Interface, 3/e)$680$646 -
最新詳解 Javascript & HTML & CSS 語法辭典(增訂新版)$490$382 -
深入淺出 Java 程式設計, 2/e (Head First Java, 2/e)$880$581 -
Linux Kernel 完全剖析$750$585 -
Dreamweaver 8 魔法書中文版$490$417 -
Linux Mail Server 技術實務─架設、稽核、防毒、防垃圾信$580$493 -
CSS 功能索引式參考手冊$390$332 -
Windows XP SP2 隨手翻$180$142 -
SQL Server 2005 資料庫開發聖經$890$757 -
作業系統原理 (Silberschatz: Operating System Principles, 7/e)$780$741 -
如何設計好網站 (Don't Make Me Think: A Common Sense Approach to Web Usability, 2/e)$450$405 -
鳥哥的 Linux 私房菜基礎學習篇, 2/e$780$702 -
Microsoft SQL Server 2005 設計實務$680$578 -
ASP.NET 2.0 深度剖析範例集$650$507 -
SQL 語法範例辭典$550$468 -
Visual C# 2005 程式開發與介面設計秘訣$750$593 -
聖殿祭司的 ASP.NET 2.0 專家技術手冊─使用 C#$720$569
商品描述
Table of Contents:
Foreword.
Preface.
About the Author.
1. Running with Scissors.
Gauging the Threat
Security Concepts
C and C++
Development Platforms
Summary
Further Reading
2. Strings.
String Characteristics
Common String Manipulation Errors
String Vulnerabilities
Process Memory Organization
Stack Smashing
Code Injection
Arc Injection
Mitigation Strategies
Notable Vulnerabilities
Summary
Further Reading
3. Pointer Subterfuge.
Data Locations
Function Pointers
Data Pointers
Modifying the Instruction Pointer
Global Offset Table
The .dtors Section
Virtual Pointers
The atexit() and on_exit() Functions
The longjmp() Function
Exception Handling
Mitigation Strategies
Summary
Further Reading
4. Dynamic Memory Management.
Dynamic Memory Management
Common Dynamic Memory Management Errors
Doug Lea's Memory Allocator
RtlHeap
Mitigation Strategies
Notable Vulnerabilities
Summary
Further Reading
5. Integer Security.
Integers
Integer Conversions
Integer Error Conditions
Integer Operations
Vulnerabilities
Nonexceptional Integer Logic Errors
Mitigation Strategies
Notable Vulnerabilities
Summary
Further Reading
6. Formatted Output.
Variadic Functions
Formatted Output Functions
Exploiting Formatted Output Functions
Stack Randomization
Mitigation Strategies
Notable Vulnerabilities
Summary
Further Reading
7. File I/O.
Concurrency
Time of Check, Time of Use
Files as Locks and File Locking
File System Exploits
Mitigation Strategies
Summary
8. Recommended Practices.
Secure Software Development Principles
Systems Quality Requirements Engineering
Threat Modeling
Use/Misuse Cases
Architecture and Design
Off-the-Shelf Software
Compiler Checks
Input Validation
Data Sanitization
Static Analysis
Quality Assurance
Memory Permissions
Defense in Depth
TSP-Secure
Summary
Further Reading
References.
Acronyms.
Index.
