Tanya Janca Book order (chronological)

Learn to code securely from the very beginning, with this straightforward and approachable guide! Alice and Bob Learn Secure Coding is an accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development. This book covers all the basic subjects such as threat modeling and security testing, but also dives deep into more complex and advanced topics for creating secure code, like specific types of vulnerabilities (and how to counter them). Throughout, the book offers analogies, stories of the characters Alice and Bob, real-life examples, technical explanations and diagrams to these abstract and complicated subjects become crystal clear.The covered topics Alice and Bob Learn Secure Coding is perfect for aspiring application security engineers and practicing software developers, as well as software project managers, penetration testers, and chief information security officers who seek to build or improve their application security programs. Alice and Bob Learn Secure Coding illustrates all the included concepts with easy-to-understand examples and concrete practical applications, furthering the reader’s ability to grasp and retain the foundational and advanced topics contained within.

Learn application security from the start with this comprehensive guide! This accessible resource is ideal for anyone looking to integrate best security practices into the System Development Life Cycle. It covers essential topics like threat modeling and security testing, while also exploring complex subjects for securing modern software systems and architectures. The book employs analogies, stories of characters Alice and Bob, real-life examples, technical explanations, and diagrams to clarify abstract concepts. Key topics include secure requirements, design, coding, deployment, various forms of security testing, common pitfalls, application security programs, and software developer security hygiene. This guide is perfect for aspiring application security engineers, practicing software developers, project managers, penetration testers, and chief information security officers aiming to enhance their application security programs. With easy-to-understand examples and practical applications, it helps readers grasp and retain both foundational and advanced topics in application security.