Threats: What Every Engineer Should Learn from Star Wars

Secure your applications with help from your favorite Jedi masters

In Threats: What Every Engineer Should Learn From Star Wars, accomplished security expert and educator Adam Shostack delivers an easy-to-read and engaging discussion of security threats and how to develop secure systems. The book will prepare you to take on the Dark Side as you learn--in a structured and memorable way--about the threats to your systems. You'll move from thinking of security issues as clever one-offs and learn to see the patterns they follow.

This book brings to light the burning questions software developers should be asking about securing systems, and answers them in a fun and entertaining way, incorporating cybersecurity lessons from the much-loved Star Wars series. You don't need to be fluent in over 6 million forms of exploitation to face these threats with the steely calm of a Jedi master.

You'll also find:

• Understandable and memorable introductions to the most important threats that every engineer should know
• Straightforward software security frameworks that will help engineers bake security directly into their systems
• Strategies to align large teams to achieve application security in today's fast-moving and agile world
• Strategies attackers use, like tampering, to interfere with the integrity of applications and systems, and the kill chains that combine these threats into fully executed campaigns

An indispensable resource for software developers and security engineers, Threats: What Every Engineer Should Learn From Star Wars belongs on the bookshelves of everyone delivering or operating technology: from engineers to executives responsible for shipping secure code.

「與你最喜愛的絕地武士一起保護你的應用程式」

在《威脅：每位工程師從星際大戰中應該學到的東西》一書中，資深安全專家和教育家亞當·肖斯塔克（Adam Shostack）以易讀且引人入勝的方式討論了安全威脅以及如何開發安全系統。這本書將使你能夠準備應對黑暗面，同時以結構化且令人難忘的方式學習有關系統威脅的知識。你將從將安全問題視為巧妙的單一事件轉變為看到它們遵循的模式。

這本書揭示了軟體開發人員應該對保護系統提出的重要問題，並以有趣且娛樂性的方式回答這些問題，融入了深受喜愛的星際大戰系列的網路安全教訓。你不需要精通超過六百萬種攻擊手法，就能以絕地武士大師的鋼鐵般冷靜面對這些威脅。

你還將找到以下內容：
- 易於理解且令人難忘的介紹，涵蓋每位工程師應該了解的最重要威脅
- 直接將安全性融入系統的簡單軟體安全框架
- 在當今快速變動且敏捷的世界中，對齊大型團隊以實現應用程式安全性的策略
- 攻擊者使用的策略，例如篡改，以干擾應用程式和系統的完整性，以及將這些威脅結合成完全執行的攻擊鏈

《威脅：每位工程師從星際大戰中應該學到的東西》是軟體開發人員和安全工程師的不可或缺的資源，適合所有從事技術交付或操作的人士，從工程師到負責交付安全程式碼的高層管理人員。

ADAM SHOSTACK is a technologist, entrepreneur, and game designer. One of the world's leading experts on threat modeling, he wrote Threat Modeling: Designing for Security and is an Affiliate Professor at the University of Washington. He is a member of the BlackHat Review Board and the founder of Shostack + Associates, a specialized security consultancy dedicated to helping organizations deliver secure systems.

ADAM SHOSTACK 是一位技術專家、企業家和遊戲設計師。作為全球領先的威脅建模專家之一，他撰寫了《威脅建模：安全設計》一書，並擔任華盛頓大學的聯合教授。他是BlackHat評審委員會的成員，也是Shostack + Associates的創始人，該公司是一家專門從事安全咨詢的顧問公司，致力於幫助組織提供安全的系統。