Derek Fisher – författare

Alicia has finally entered a new world of technology when her parents give her a tablet for her birthday. She has seen the many uses of this technology through her friends as they access apps and games that Alicia has yet to experience. Until now. But using such technology can bring a set of challenges that are new to both Alicia and her parents. Understanding the different apps and games and how to use them properly can be tricky. Will Alicia know how to use it in a way that is fun and allows her to connect with her friends while being safe? Will she be able to avoid some of the more problematic interactions while using this technology? Both her and her parents learn how to provide a safe and fun environment for Alicia as she jumps headfirst into using technology!

The Three Time NBA Champion and starting point guard for the Los Angeles Lakers shares his Christian faith and inspirational values for success and happiness.Since his inaugural season with the NBA in 1996, Derek Fisher has had a dramatic impact on the great success of the Lakers. Playing alongside legendary players like Kobe Bryant, Shaquille O’Neal, and Lamar Odom, Fisher has held his position at point guard, participating in some of the most dramatic post-season games and moments in recent memory.In 2007 Derek Fisher and his wife Candace’s lives were upturned by news that their eleven-month-old daughter, Tatum, had been diagnosed with a degenerative and rare form of eye cancer called retinoblastoma. Although his team, the Utah Jazz, was in the midst of a heated playoff series, Fisher immediately put his family first to be with his daughter at the time of her required emergency surgery and chemotherapy. Nominated the best moment in the 2007 ESPY Awards, Derek was able to make a dramatic late entrance and performance in the fourth quarter of game 2 to help the Jazz to an emotional victory. Following the season, Fisher asked the Jazz to release him of his contract so he could devote his energies to fighting his daughter’s retinoblastoma without knowing if he would ever play basketball again. Fisher officially rejoined the Lakers, resuming his role as point guard, and provided a veteran influence alongside Kobe Bryant to a relatively young Lakers squad. In his compelling new book, Fisher shares the Christian values that have guided him on the court and off. With anecdotes from his personal and professional life, Fisher offers lessons learned along the way. Drawing on the power of faith, he shows how anyone can play for a successful team: whether that team is family, community, or just happens to be one in the NBA.

Stop dangerous threats and secure your vulnerabilities without slowing down delivery. This practical book is a one-stop guide to implementing a robust application security program.Application Security Program Handbook teaches you to implement a robust program of security throughout your development process. It goes well beyond the basics, detailing a flexible approach that can adapt and evolve to new and emerging threats. Follow the expert advice in this guide and you'll reliably deliver software that is free from security defects and critical vulnerabilities.

As a developer, you must build security into your software throughout its development lifecycle. This book addresses all the practices, tools, technology, people, and processes you need to reduce the risk of attacks and vulnerabilities in your software.

Application Security Program Handbook is full of strategies for setting up and maturing a security program for your development process. Its realistic recommendations take a service-oriented approach to application security that's perfectly suited to the fast-pace of modern development. Focused on the realities of software development, it shows you how to avoid making security a gated exercise.Inside, you'll learn to assess the current state of your app's security, identify key risks to your organization, and measure the success of any defensive programs you deploy. You'll master common methodologies and practices that help safeguard your software, along with defensive tools you can use to keep your apps safe. With this handy reference guide by your side, you'll be able to implement reliable security in a way that doesn't impact your delivery speed.

RETAIL SELLING POINTS

 Application security tools you can use throughout the development lifecycle   Creating threat models   Mitigating web app vulnerabilities   Creating a DevSecOps pipeline   Application security as a service model   Reporting structures that highlight the value of application security   Creating a software security ecosystem that benefits development

AUDIENCE

For software developers, architects, team leaders, and project managers looking to implement security in their pipelines.

Stop dangerous threats and secure your vulnerabilities without slowing down delivery. This practical book is a one-stop guide to implementing a robust application security program.In the Application Security Program Handbook you will learn:     Why application security is so important to modern software     Application security tools you can use throughout the development lifecycle     Creating threat models     Rating discovered risks     Gap analysis on security tools     Mitigating web application vulnerabilities     Creating a DevSecOps pipeline     Application security as a service model     Reporting structures that highlight the value of application security     Creating a software security ecosystem that benefits development     Setting up your program for continuous improvement The Application Security Program Handbook teaches you to implement a robust program of security throughout your development process. It goes well beyond the basics, detailing flexible security fundamentals that can adapt and evolve to new and emerging threats. Its service-oriented approach is perfectly suited to the fast pace of modern development. Your team will quickly switch from viewing security as a chore to an essential part of their daily work. Follow the expert advice in this guide and you’ll reliably deliver software that is free from security defects and critical vulnerabilities. About the technology Application security is much more than a protective layer bolted onto your code. Real security requires coordinating practices, people, tools, technology, and processes throughout the life cycle of a software product. This book provides a reproducible, step-by-step road map to building a successful application security program. About the book The Application Security Program Handbook delivers effective guidance on establishing and maturing a comprehensive software security plan. In it, you’ll master techniques for assessing your current application security, determining whether vendor tools are delivering what you need, and modeling risks and threats. As you go, you’ll learn both how to secure a software application end to end and also how to build a rock-solid process to keep it safe. What's inside     Application security tools for the whole development life cycle     Finding and fixing web application vulnerabilities     Creating a DevSecOps pipeline     Setting up your security program for continuous improvement About the reader For software developers, architects, team leaders, and project managers. About the author Derek Fisher has been working in application security for over a decade, where he has seen numerous security successes and failures firsthand. Table of Contents PART 1 DEFINING APPLICATION SECURITY 1 Why do we need application security? 2 Defining the problem 3 Components of application security PART 2 DEVELOPING THE APPLICATION SECURITY PROGRAM 4 Releasing secure code 5 Security belongs to everyone 6 Application security as a service PART 3 DELIVER AND MEASURE 7 Building a roadmap 8 Measuring success 9 Continuously improving the program

Build threat modeling skills with practical advanced techniques to enhance risk analysis, optimize security measures, and stay ahead of emerging threats in the complex cybersecurity landscapeFree with your book: DRM-free PDF version + access to Packt's next-gen Reader*Key FeaturesIdentify and mitigate security threats across software, cloud, mobile, IoT, and supply chains using STRIDE, PASTA, and MITRE ATT&CKLearn from real-world case studies showing practical threat modeling applications across industriesBuild threat modeling programs with the right team, tools, SDLC integration, and continuous improvementBook DescriptionThreat modeling has become a cornerstone of modern cybersecurity, yet it is often overlooked, leaving security gaps that attackers can exploit. With the rise in system complexity, cloud adoption, AI-driven threats, and stricter compliance requirements, security teams need a structured approach to proactively spot and stop risks before attackers do. This book delivers exactly that, offering actionable insights for applying industry best practices and emerging technologies to secure systems. It breaks down the fundamentals of threat modeling and walks you through key frameworks and tools such as STRIDE, MITRE ATT&CK, PyTM, and Attack Paths, helping you choose the right model and create a roadmap tailored to your business. You'll learn how to use leading threat modeling tools, identify and prioritize potential threats, and integrate these practices into the software development life cycle to detect risks early. The book also examines how AI can enhance analysis and streamline security decision-making for faster, stronger defenses.By the end, you'll have everything you need to build systems that anticipate and withstand evolving threats, keeping your organization secure in an ever-changing digital landscape.*Email sign-up and proof of purchase requiredWhat you will learnCreate foundational threat modeling artifacts like Data Flow Diagrams and security architecture diagrams to visualize system threatsUnderstand the relationship between vulnerabilities (exploitable weaknesses) and threats (sources of harm)Analyze real-world case studies to see how threat modeling is applied in industry incidentsEvaluate and compare popular threat modeling tools, both open source and commercialExplore advanced topics, including threat modeling for cloud environments and integrating with DevSecOpsWho this book is forThis book is for cybersecurity professionals, security consultants, penetration testers, and compliance managers seeking to integrate threat modeling into their assessment methodologies and client engagements. It’s also ideal for software architects, DevOps engineers, risk managers, and organizational leaders responsible for identifying, assessing, and mitigating security risks in their technological environments. Whether you’re new to threat modeling or looking to enhance your existing expertise, this book helps you with foundational knowledge as well as advanced techniques.