Sign-In
Cart
Application Security Program Handbook: A Guide for Software Engineers and Team Leaders
Paperback
Please select the version of book you would like to purchase.
ISBN10: 163343981X
ISBN13: 9781633439818
Publisher: Manning Publications
Published: Dec 27 2022
Pages: 296
Weight: 1.14
Height: 0.70 Width: 7.30 Depth: 9.10
Language: English
ISBN13: 9781633439818
Publisher: Manning Publications
Published: Dec 27 2022
Pages: 296
Weight: 1.14
Height: 0.70 Width: 7.30 Depth: 9.10
Language: English
Stop dangerous threats and secure your vulnerabilities without slowing down delivery. This practical book is a one-stop guide to implementing a robust application security program. In the Application Security Program Handbook you will learn: Why application security is so important to modern software
Application security tools you can use throughout the development lifecycle
Creating threat models
Rating discovered risks
Gap analysis on security tools
Mitigating web application vulnerabilities
Creating a DevSecOps pipeline
Application security as a service model
Reporting structures that highlight the value of application security
Creating a software security ecosystem that benefits development
Setting up your program for continuous improvement The Application Security Program Handbook teaches you to implement a robust program of security throughout your development process. It goes well beyond the basics, detailing flexible security fundamentals that can adapt and evolve to new and emerging threats. Its service-oriented approach is perfectly suited to the fast pace of modern development. Your team will quickly switch from viewing security as a chore to an essential part of their daily work. Follow the expert advice in this guide and you'll reliably deliver software that is free from security defects and critical vulnerabilities. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology
Application security is much more than a protective layer bolted onto your code. Real security requires coordinating practices, people, tools, technology, and processes throughout the life cycle of a software product. This book provides a reproducible, step-by-step road map to building a successful application security program. About the book
The Application Security Program Handbook delivers effective guidance on establishing and maturing a comprehensive software security plan. In it, you'll master techniques for assessing your current application security, determining whether vendor tools are delivering what you need, and modeling risks and threats. As you go, you'll learn both how to secure a software application end to end and also how to build a rock-solid process to keep it safe. What's inside Application security tools for the whole development life cycle
Finding and fixing web application vulnerabilities
Creating a DevSecOps pipeline
Setting up your security program for continuous improvement About the reader
For software developers, architects, team leaders, and project managers. About the author
Derek Fisher has been working in application security for over a decade, where he has seen numerous security successes and failures firsthand. Table of Contents
PART 1 DEFINING APPLICATION SECURITY
1 Why do we need application security?
2 Defining the problem
3 Components of application security
PART 2 DEVELOPING THE APPLICATION SECURITY PROGRAM
4 Releasing secure code
5 Security belongs to everyone
6 Application security as a service
PART 3 DELIVER AND MEASURE
7 Building a roadmap
8 Measuring success
9 Continuously improving the program
Creating threat models
Rating discovered risks
Gap analysis on security tools
Mitigating web application vulnerabilities
Creating a DevSecOps pipeline
Application security as a service model
Reporting structures that highlight the value of application security
Creating a software security ecosystem that benefits development
Setting up your program for continuous improvement The Application Security Program Handbook teaches you to implement a robust program of security throughout your development process. It goes well beyond the basics, detailing flexible security fundamentals that can adapt and evolve to new and emerging threats. Its service-oriented approach is perfectly suited to the fast pace of modern development. Your team will quickly switch from viewing security as a chore to an essential part of their daily work. Follow the expert advice in this guide and you'll reliably deliver software that is free from security defects and critical vulnerabilities. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology
Application security is much more than a protective layer bolted onto your code. Real security requires coordinating practices, people, tools, technology, and processes throughout the life cycle of a software product. This book provides a reproducible, step-by-step road map to building a successful application security program. About the book
The Application Security Program Handbook delivers effective guidance on establishing and maturing a comprehensive software security plan. In it, you'll master techniques for assessing your current application security, determining whether vendor tools are delivering what you need, and modeling risks and threats. As you go, you'll learn both how to secure a software application end to end and also how to build a rock-solid process to keep it safe. What's inside Application security tools for the whole development life cycle
Finding and fixing web application vulnerabilities
Creating a DevSecOps pipeline
Setting up your security program for continuous improvement About the reader
For software developers, architects, team leaders, and project managers. About the author
Derek Fisher has been working in application security for over a decade, where he has seen numerous security successes and failures firsthand. Table of Contents
PART 1 DEFINING APPLICATION SECURITY
1 Why do we need application security?
2 Defining the problem
3 Components of application security
PART 2 DEVELOPING THE APPLICATION SECURITY PROGRAM
4 Releasing secure code
5 Security belongs to everyone
6 Application security as a service
PART 3 DELIVER AND MEASURE
7 Building a roadmap
8 Measuring success
9 Continuously improving the program
Also from
Fisher, Derek
Threat Modeling Best Practices: Proven frameworks and practical techniques to secure modern systems
Fisher, Derek
Paperback
$56.24
Also in
Computer Security
Dawn of the Code War: America's Battle Against Russia, China, and the Rising Global Cyber Threat
Graff, Garrett M.
Carlin, John P.
Paperback
From $10.99
CompTIA Network+ Certification All-in-One Exam Guide, Ninth Edition (Exam N10-009)
Weissman, Jonathan S.
Paperback
$57.00
5 Habits of the Tech-Ready Family: Raising Wise Kids in a Wild Digital World
McKenna, Chris
Paperback
$18.99
Spies, Lies, and Cybercrime: Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers
O'Neill, Eric
Hardcover
$28.50
Comptia A+ Complete Study Guide, 2-Volume Set: Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202
Buhagiar, Jon
Docter, Quentin
Paperback
$61.75
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle
Stewart, James Michael
Gibson, Darril
Chapple, Mike
Paperback
$120.00
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
$37.99
Comptia Security+ Study Guide with Over 500 Practice Test Questions: Exam Sy0-701
Chapple, Mike
Seidl, David
Paperback
$52.25
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide
Chapple, Mike
Stewart, James Michael
Gibson, Darril
Paperback
$70.30
Password Logbook (Hip Floral): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
$10.44
Don't Trust Your Gut: Using Data to Get What You Really Want in Life
Stephens-Davidowitz, Seth
Paperback
$18.99
Blown to Bits: Your Life, Liberty, and Happiness After the Digital Explosion
Ledeen, Ken
Lewis, Harry
Abelson, Hal
Paperback
$23.74
Digital Ethics in the Age of AI: Navigating the ethical frontier today and beyond
Mehan, Julie
Paperback
$47.99
From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification
Martin-Vegue, Tony
Paperback
$37.99
Hacking & Tor: The Complete Beginners Guide To Hacking, Tor, & Accessing The Deep Web & Dark Web
Jones, Jack
Paperback
$35.99
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Greenberg, Andy
Paperback
$19.00
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
$18.04
The Cybernetic Society: How Humans and Machines Will Shape the Future Together
Husain, Amir
Hardcover
$28.50
Comptia A+ Complete Certification Kit: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
Docter, Quentin
Buhagiar, Jon
McMillan, Troy
Paperback
$114.00
Comptia A+ Complete Review Guide: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Paperback
$33.25
Container Security: Fundamental Technology Concepts That Protect Cloud Native Applications
Rice, Liz
Paperback
$53.19
Cyber War: The Next Threat to National Security and What to Do about It
Clarke, Richard A.
Knake, Robert
Paperback
$19.99
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Paperback
$15.20
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
Zetter, Kim
Paperback
$19.00
Humorous Cryptograms: 300 Large Print Puzzles To Keep You Entertained (Large Print Edition)
Nest, Game
Paperback
$12.25
The Future of Hacking: The Rise of Cybercrime and the Fight to Keep Us Safe
Scherling, Laura S.
Hardcover
$49.30
Home Assistant for Beginners: Build a private smart home without relying on the cloud
Haagenrud, Thom
Paperback
$20.39
Data Engineering for Cybersecurity: Build Secure Data Pipelines with Free and Open-Source Tools
Bonifield, James
Paperback
$47.49
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
$77.00
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
$56.99
The Secure Board: How To Be Confident That Your Organisation Is Cyber Safe
Leibel, Anna
Pales, Claire
Paperback
$21.24
The Book of Pf, 4th Edition: A No-Nonsense Guide to the OpenBSD Firewall
Hansteen, Peter N. M.
Paperback
$56.99
Hackers Underground Knowledge: Quick and easy way to learn secret hacker techniques
Kohler, Martin
Paperback
$8.82
Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity
Gebeshuber, Klaus
Kloep, Peter
Kofler, Michael
Paperback
$56.95
Cilium: Up and Running: Cloud Native Networking, Security, and Observability
Vibert, Nico
Nikolic, Filip
Laverack, James
Paperback
$75.99
Comptia A+ Complete Practice Tests: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
O'Shea, Audrey
Paperback
$42.75
Privacy and Security for Large Language Models: Hands-On Privacy-Preserving Techniques for Personalized AI
Lin, Baihan
Paperback
$75.99
Raising Humans in a Digital World: Helping Kids Build a Healthy Relationship with Technology
Graber, Diana
Paperback
$19.99
Shit I Can't Remember: Keep track of usernames, passwords, web addresses in one easy & organized location
Books, Family's
Paperback
$7.19
The Art of Deception: Controlling the Human Element of Security
Simon, William L.
Mitnick, Kevin D.
Paperback
$20.90
A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend Them Back
Schneier, Bruce
Paperback
$18.99
Dissecting the Dark Web: Reverse Engineering the Tools of the Underground Economy
Kaye, Lindsay
Paperback
$56.99
Meshtastic: A Comprehensive Guide to Off-Grid Mesh Communication: Second Edition
Rodgers, David A., Jr.
Paperback
$17.72
Learning Serverless Security: Hacking and Securing Serverless Cloud Applications on Aws, Azure, and Google Cloud
Lat, Joshua Arvin
Paperback
$66.49
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Hardcover
$28.49
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
Pinto, Marcus
Stuttard, Dafydd
Paperback
$49.40
Crypto Conned My 200K Nightmare: And 10 Key Steps To Safeguard Your Future
Holliday, Ed Doc
Paperback
$14.24
Cisa Certified Information Systems Auditor Study Guide and Practice Tests Bundle: Covers 2024 Exam Objectives
Gregory, Peter H.
Chapple, Mike
Paperback
$12.30
AWS Certified Security Study Guide: Specialty (Scs-C02) Exam
Mu¿oz, Mauricio
Moraes, Alexandre M. S. P.
Goldfarb, Dario Lucas
Paperback
$9.49
Cybersecurity - Attack and Defense Strategies - Third Edition: Improve your security posture to mitigate risks and prevent attackers from infiltrating
Diogenes, Yuri
Ozkaya, Erdal
Paperback
$54.99
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
$62.49
Industrial Cybersecurity - Second Edition: Efficiently monitor the cybersecurity posture of your ICS environment
Ackerman, Pascal
Paperback
$68.74
Scams, Hacking, and Cybersecurity: The Ultimate Guide to Online Safety and Privacy
Brooks-Kempler, May
Paperback
$20.89
Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
Paperback
$62.69
Zero Trust Networks: Building Secure Systems in Untrusted Networks
Rais, Razi
Morillo, Christina
Gilman, Evan
Paperback
$62.69
Evasion Engineering: Building Custom Red Team Tools for Modern Defenses
Chow, Dennis
Lasalvia, Michael
Paperback
$56.99
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
Fyodor
Lyon, Gordon
Paperback
$47.45
Identity Attack Vectors: Strategically Designing and Implementing Identity Security, Second Edition
Rolls, Darran
Haber, Morey J.
Paperback
$56.99
Red Team Engineering: The Art of Building Offensive Tools and Infrastructure
Erdmann, Casey
Paperback
$75.99
AI Governance Playbook: How to Secure, Control, and Optimize Artificial Intelligence Initiatives
Surdak, Chris
Smallwood, Robert F.
Paperback
$50.68
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1201
Chapple, Mike
Paperback
$47.50
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
$37.99
Building a Career in Cybersecurity: The Strategy and Skills You Need to Succeed
Diogenes, Yuri
Paperback
$33.24
Isc2 Ccsp Certified Cloud Security Professional Official Study Guide & Practice Tests Bundle
Chapple, Mike
Seidl, David
Paperback
$90.25
Locksport: A Hackers Guide to Lockpicking, Impressioning, and Safe Cracking
Weyers, Jos
Burrough, Matt
Belgers, Walter
Paperback
$52.24
Cisco ASA for Accidental Administrators: An Illustrated Step-by-Step ASA Learning and Configuration Guide
Crawley, Don R.
Paperback
$42.75
Cybersecurity for Everyone: Securing your home or small business network
Sadler, Terence L.
Paperback
$20.99
Cism Certified Information Security Manager All-In-One Exam Guide [With CD (Audio)]
Gregory, Peter H.
Paperback
$57.00
Wireless Exploits And Countermeasures: Kali Linux Nethunter, Aircrack-NG, Kismet, And Wireshark
Botwright, Rob
Paperback
$49.94
Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools
Jaswal, Nipun
Paperback
$57.49
The Mathematics of Secrets: Cryptography from Caesar Ciphers to Digital Encryption
Holden, Joshua
Paperback
$18.00
Operation Carder Kaos: How One Agent Penetrated the Underground Economy
Latulip, Richard K.
Paperback
$48.99
Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls That Derail Us
Metcalf, Leigh
Dykstra, Josiah
Spafford, Eugene
Paperback
$56.24
Certificate of Cloud Security Knowledge (Ccsk V5) Study Guide: In-Depth Guidance and Practice
Thompson, Graham
Paperback
$56.99
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Paperback
$62.49
Digital Life Without the Stress: The Complete Beginner's Guide to Computers, Smartphones, and Internet for Seniors who want Independence
Valentini, Giovannijohnny
Paperback
$19.19
Software Security for Developers: With Examples in Java and Spring
Saikali, Adib
Spilca, Laurentiu
Paperback
$74.99
Ethical Hacking for Beginners: A Step by Step Guide for you to Learn the Fundamentals of CyberSecurity and Hacking
Nastase, Ramon Adrian
Paperback
$12.34
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 2 Exam 220-1202
Chapple, Mike
Paperback
$37.95
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
Saydjari, O. Sami
Paperback
$73.15
Het Kleine Bitcoinboekje: Waarom Bitcoin belangrijk is voor je vrijheid, financiën en toekomst
Ajiboye, Timi
Buenaventura, Luis
Vranova, Alena
Paperback
$13.97
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Adell, Christian
Lowe, Scott S.
Oswalt, Matt
Paperback
$56.99
Learning Ransomware Response & Recovery: Stopping Ransomware One Restore at a Time
Saylor, Michael
Preston, W. Curtis
Paperback
$56.99
Malware Development for Ethical Hackers: Learn how to develop various types of malware to strengthen cybersecurity
Zhussupov, Zhassulan
Paperback
$68.74