One Must Not Have - 19 Fatal Security Vulnerabilities in Software

Author: Haowu
Publisher:
Publish Date: 2006-11-01
Features: We usually expect computers to execute tasks according to our instructions, and in real life, we achieve this through the use of software. Currently, both computers and their software have become extremely complex. From the moment we click the mouse to when we see the desired results, the process may involve multiple layers of software. To fully utilize the capabilities of the computer platform, we often rely on the correctness of these software layers. For these software layers, each one may encounter issues, and the results of software execution may not meet the author's expectations or, at the very least, the needs of the computer operator. These vulnerabilities introduce a certain level of uncertainty into our systems, leading to significant security vulnerabilities. Some of these vulnerabilities are relatively simple, such as software or system crashes (which can be used for denial-of-service attacks) or buffer overflows (which allow attackers to replace application code and execute arbitrary commands). This book follows the principles of being concise, easy to read, and practical, covering currently popular programming languages and runtime platforms, and addressing 19 common fatal vulnerabilities related to software security. The book combines theory and practice, providing detailed descriptions, underlying principles, detection methods, and mitigation measures for each vulnerability. Additionally, for each vulnerability, the author selects real-world examples from systems to illustrate them, making them more intuitive and leaving a deeper impression on the reader. Moreover, in the mitigation measures, the author provides specific code solutions in multiple languages, further enhancing the book's practicality.