Hunting Security Bugs

Published:	August 30, 2006	Accompanying Media:	N/A
Author:	Tom Gallagher; Bryan Jeffries; Lawrence Landauer	Language:	English
Length:	592 Pages	Level:	Intermediate, Advanced
ISBN 13:	9780735621879	Technology:	Security
ISBN 10:	0-7356-2187-X	Format:	N/A
List Price:	$ 49.99

About The BookYour essential reference to software security testing—from the experts.

Learn how to think like an attacker—and identify potential security issues in your software. In this essential guide, security testing experts offer practical, hands-on guidance and code samples to help you find, classify, and assess security bugs before your software is released. Discover how to:

Identify high-risk entry points and create test cases

Test clients and servers for malicious request/response bugs

Use black box and white box approaches to help reveal security vulnerabilities

Uncover spoofing issues, including identity and user interface spoofing

Detect bugs that can take advantage of your program’s logic, such as SQL injection

Test for XML, SOAP, and Web services vulnerabilities

Recognize information disclosure and weak permissions issues

Identify where attackers can directly manipulate memory

Test with alternate data representations to uncover canonicalization issues

Expose COM and ActiveX repurposing attacksPLUS—Get code samples and debugging tools on the Web

About Tom Gallagher; Bryan Jeffries; Lawrence LandauerTom Gallagher is the lead of the Microsoft Office Security Test team, where he focuses on penetration testing, writing security testing tools, and providing security education.

Bryan Jeffries is a software engineer responsible for driving security testing on Microsoft SharePoint Products and Technologies.

Lawrence Landauer is a software engineer at Microsoft where he works on coding, testing, and training projects related to security, personal productivity, and deployment.

Michael Howard, Series Consulting Editor, is a leading security expert and author

Have Questions? For advice about training and certification, connect with peers:

Visit the training and certification forum

For questions about a specific certification, chat with a Microsoft Certified Professional (MCP):

Visit our MCP newsgroups

To find out about recommended blogs, Web sites, and upcoming Live Meetings on popular topics, visit our community site:

Visit the Microsoft Learning community

What do you think of this book?Your feedback is important in helping us create books that serve your needs and meet your expectations. Please take our survey at www.microsoft.com/learning/booksurvey

Note: You will need this book's 13-digit International Standard Book Number (ISBN) to take the survey. The ISBN 13 can be found above.
To report or search for corrections in this book or companion content,
please go to www.microsoft.com/learning/support/books/

Book index