ABSTRACT

Security for Software Engineers is designed to introduce security concepts to undergraduate software engineering students. The book is divided into four units, each targeting activities that a software engineer will likely be involved in within industry.

The book explores the key areas of attack vectors, code hardening, privacy, and social engineering. Each topic is explored from a theoretical and a practical-application standpoint.

Features:

  • Targets software engineering students - one of the only security texts to target this audience.
  • Focuses on the white-hat side of the security equation rather than the black-hat side.
  • Includes many practical and real-world examples that easily translate into the workplace.
  • Covers a one-semester undergraduate course.
  • Describes all aspects of computer security as it pertains to the job of a software engineer and presents problems similar to that which an engineer will encounter in the industry.

This text will equip students to make knowledgeable security decisions, be productive members of a security review team, and write code that protects a user’s information assets.

part Unit 0|20 pages

Introduction to Security

chapter Chapter 0|4 pages

Computer Security

chapter Chapter 1|15 pages

Roles

part Unit 1|78 pages

Attack Vectors

chapter Chapter 2|28 pages

Classification of Attack

chapter Chapter 3|18 pages

Software Weapons

chapter Chapter 4|31 pages

Social Engineering

part Unit 2|119 pages

Code Hardening

chapter Chapter 5|19 pages

Command Injection

chapter Chapter 6|17 pages

Script Injection

chapter Chapter 7|42 pages

Memory Injection

chapter Chapter 8|23 pages

Threat Modeling

chapter Chapter 9|17 pages

Mitigation

part Unit 3|93 pages

Privacy

chapter Chapter 10|22 pages

Authentication

chapter Chapter 11|34 pages

Access Control

chapter Chapter 12|33 pages

Encryption