John McDonald – författare

“There are a number of secure programming books on the market, but none that go as deep as this one. The depth and detail exceeds all books that I know about by an order of magnitude.”

—Halvar Flake, CEO and head of research, SABRE Security GmbH

 

The Definitive Insider’s Guide to Auditing Software Security

 

This is one of the most detailed, sophisticated, and useful guides to software security auditing ever written. The authors are leading security consultants and researchers who have personally uncovered vulnerabilities in applications ranging from sendmail to Microsoft Exchange, Check Point VPN to Internet Explorer. Drawing on their extraordinary experience, they introduce a start-to-finish methodology for “ripping apart” applications to reveal even the most subtle and well-hidden security flaws.

 

The Art of Software Security Assessment covers the full spectrum of software vulnerabilities in both UNIX/Linux and Windows environments. It demonstrates how to audit security in applications of all sizes and functions, including network and Web software. Moreover, it teaches using extensive examples of real code drawn from past flaws in many of the industry''s highest-profile applications.

 

Coverage includes

 

• Code auditing: theory, practice, proven methodologies, and secrets of the trade

• Bridging the gap between secure software design and post-implementation review

• Performing architectural assessment: design review, threat modeling, and operational review

• Identifying vulnerabilities related to memory management, data types, and malformed data

• UNIX/Linux assessment: privileges, files, and processes

• Windows-specific issues, including objects and the filesystem

• Auditing interprocess communication, synchronization, and state

• Evaluating network software: IP stacks, firewalls, and common application protocols

• Auditing Web applications and technologies

 

This book is an unprecedented resource for everyone who must deliver secure software or assure the safety of existing software: consultants, security specialists, developers, QA staff, testers, and administrators alike.

 

Contents

ABOUT THE AUTHORS     xv

PREFACE     xvii

ACKNOWLEDGMENTS    xxi

I Introduction to Software Security Assessment

1 SOFTWARE VULNERABILITY FUNDAMENTALS    3

2 DESIGN REVIEW     25

3 OPERATIONAL REVIEW    67

4 APPLICATION REVIEW PROCESS    91

II Software Vulnerabilities

5 MEMORY CORRUPTION    167

6 C LANGUAGE ISSUES     203

7 PROGRAM BUILDING BLOCKS     297

8 STRINGS ANDMETACHARACTERS    387

9 UNIX I: PRIVILEGES AND FILES     459

10 UNIX II: PROCESSES     559

11 WINDOWS I: OBJECTS AND THE FILE SYSTEM     625

12 WINDOWS II: INTERPROCESS COMMUNICATION     685

13 SYNCHRONIZATION AND STATE    755

III Software Vulnerabilities in Practice

14 NETWORK PROTOCOLS    829

15 FIREWALLS    891

16 NETWORK APPLICATION PROTOCOLS    921

17 WEB APPLICATIONS    1007

18 WEB TECHNOLOGIES     1083

BIBLIOGRAPHY     1125

INDEX     1129

This book provides a new interpretation of the English economy between 1066 and 1086 by using methods not previously applied to Economic theory and statistical techniques to reappraise the information recorded in the Domesday book. It is the first major reinterpretation of the Domesday economy since the work of J.H. Round and F.W. Maitland almost one hundred years ago, and its publication in 1986 coincided with the 900th anniversary of Domesday.

Receptors for Extracellular Matrix covers the major receptor families and their potential biological functions. Composed of eight chapters, the book first discusses the structure and function of membrane-associated proteoglycans, focusing on two classes of integral membrane molecules: syndecan and CD44. It then examines the important area of mechanisms of signal transduction from integrin receptors that must mediate the effects of extracellular matrices and other ligands on cell behavior. Multidomain proteins of the extracellular matrix and their role in controlling cellular growth are also considered. This book also discusses the significant research developments in NCAM, the most abundant and widespread of the known vertebrate cell-cell adhesion. The discussion particularly emphasizes the role of posttranslational glycosylation with polysialic acid in the function of the NCAM molecule that undergoes unusual and highly characteristic differences in glycosylation during development. Other chapters deal with the regulation of neural development by the extracellular matrix and the molecular basis of cell adhesion. This book includes discussions on the interaction of adhesion receptors with well-characterized cellular recognition sites and extracellular ligands and cell migration occurring during embryogenesis, gastrulation, neural crest cell migration, neurite extension, lymphocyte migration, and wound healing. The concluding chapters address the wide array of integrin associations, their physiologic relevance and structural aspects, as well as the anchorin CII, a collagen-binding protein of the calpactin-lipocortin family. This book is of great value to cell biologists and researchers.

John McDonald looks at the elusive thread of opposition and conflict that runs through human interrelationships, from the striking of a bargain to the clash of war. He discusses poker; game theory, as it applies to games but mainly to business; the strategies of buyers and sellers; and finally military and other applications.

This fascinating study uses Domesday book data and Management Science methods to examine manorial production efficiency in Medieval Essex in 1086. This book reveals unexpected facts about economic history, and is a remarkable contribution to economic history and medieval studies. It will be of great interest to economists, management scientists, medievalists and anyone involved with Domesday studies.

This book will change the way Americans think about their cities. It provides a comprehensive economic and social history of urban America since 1950, covering the 29 largest urban areas of that period. Specifically, the book covers 17 cities in the Northeast, 6 in the South, and 6 in the West, decade by decade, with extensive data and historical narrative. The author divides his analysis into three periods - urban growth (1950 to 1970), urban crisis (late 1960s to 1990), and urban rebirth (since 1990). He draws on the concepts of the vicious circle and the virtuous circle to offer the first in-depth explanation for the transition from urban crisis to urban rebirth that took place in the early 1990s. "Urban America" is both a message of hope and a call to action for students and professionals in urban studies. It will inspire readers to concentrate on finding ways and means to ensure that the urban rebirth will continue.

This book will change the way Americans think about their cities. It provides a comprehensive economic and social history of urban America since 1950, covering the 29 largest urban areas of that period. Specifically, the book covers 17 cities in the Northeast, 6 in the South, and 6 in the West, decade by decade, with extensive data and historical narrative. The author divides his analysis into three periods - urban growth (1950 to 1970), urban crisis (late 1960s to 1990), and urban rebirth (since 1990). He draws on the concepts of the vicious circle and the virtuous circle to offer the first in-depth explanation for the transition from urban crisis to urban rebirth that took place in the early 1990s. "Urban America" is both a message of hope and a call to action for students and professionals in urban studies. It will inspire readers to concentrate on finding ways and means to ensure that the urban rebirth will continue.

What is it about puffins that makes them so endearing? Is it their portly, wide-eyed, toy-like appearance, or their large, brightly colored bills? Whatever the reason, puffins appeal to practically everybody. And the puffins on these pages are no exception. These sixty-four pictures of puffins at their most amusing, paired with witty commentary, are a unique presentation of Maine's favorite sea bird.

This fascinating study uses Domesday book data and Management Science methods to examine manorial production efficiency in Medieval Essex in 1086. This book reveals unexpected facts about economic history, and is a remarkable contribution to economic history and medieval studies. It will be of great interest to economists, management scientists, medievalists and anyone involved with Domesday studies.

This fascinating study uses Domesday book data and Management Science methods to examine manorial production efficiency in Medieval Essex in 1086. This book reveals unexpected facts about economic history, and is a remarkable contribution to economic history and medieval studies. It will be of great interest to economists, management scientists, medievalists and anyone involved with Domesday studies.

This fascinating study uses Domesday book data and Management Science methods to examine manorial production efficiency in Medieval Essex in 1086. This book reveals unexpected facts about economic history, and is a remarkable contribution to economic history and medieval studies. It will be of great interest to economists, management scientists, medievalists and anyone involved with Domesday studies.

This book will change the way Americans think about their cities. It provides a comprehensive economic and social history of urban America since 1950, covering the 29 largest urban areas of that period. Specifically, the book covers 17 cities in the Northeast, 6 in the South, and 6 in the West, decade by decade, with extensive data and historical narrative. The author divides his analysis into three periods - urban growth (1950 to 1970), urban crisis (late 1960s to 1990), and urban rebirth (since 1990). He draws on the concepts of the vicious circle and the virtuous circle to offer the first in-depth explanation for the transition from urban crisis to urban rebirth that took place in the early 1990s. "Urban America" is both a message of hope and a call to action for students and professionals in urban studies. It will inspire readers to concentrate on finding ways and means to ensure that the urban rebirth will continue.

This book will change the way Americans think about their cities. It provides a comprehensive economic and social history of urban America since 1950, covering the 29 largest urban areas of that period. Specifically, the book covers 17 cities in the Northeast, 6 in the South, and 6 in the West, decade by decade, with extensive data and historical narrative. The author divides his analysis into three periods - urban growth (1950 to 1970), urban crisis (late 1960s to 1990), and urban rebirth (since 1990). He draws on the concepts of the vicious circle and the virtuous circle to offer the first in-depth explanation for the transition from urban crisis to urban rebirth that took place in the early 1990s. "Urban America" is both a message of hope and a call to action for students and professionals in urban studies. It will inspire readers to concentrate on finding ways and means to ensure that the urban rebirth will continue.

John McDonald has been making people laugh for decades with his humorous yarns poking fun at people from away, people from Maine, and life in general. Following up the wildly popular A Moose and a Lobster Walk into a Bar, the "Dean of Maine Storytelling" offers a new collection of stories that will make you laugh till you cry and cry till you laugh. Here's a new round of classic stories brimming with half truths, stretched truths, and wry observations about life in Maine.

John McDonald has been making people laugh for decades with his humorous yarns poking fun at people from away, people from Maine, and life in general. Following up the wildly popular A Moose and a Lobster Walk into a Bar, the "Dean of Maine Storytelling" offers a new collection of stories that will make you laugh till you cry and cry till you laugh. Here's a new round of classic stories brimming with half truths, stretched truths, and wry observations about life in Maine.

Bears (particularly black bears) by nature are elusive and difficult to see in the wild; yet they are immensely popular, perhaps because they are surprisingly human-looking, though their dense fur and seemingly clumsy gait often lead them to be compared with shaggy, bumbling clowns. Well, the bears in this little gift book have had enough. They’re here to set the record straight. 75-100 color photos capture bears just doing their thing and being bears; and short, pithy phrases tell you just what these bears would say if they could only talk.

A lighthearted look at moose and their mannerismsGathered here dozens of color images of moose at their wackiest, each accompanied by a silly caption from the human mind. These amusing and enlightening photographs provide a surprising insight into the character of moose. People of all ages will be delighted by this hilarious look at moose and their mannerisms.

Entering service in the early 1960s, the M60 tank was in production for 23 years and formed the backbone of US Army and Marine armoured units during the Cold War.Over 15,000 were built in four basic models: the M60, M60A1, M60A2, and the M60A3. Although the M60 had been phased out of US Army service by the time Iraq invaded Kuwait in 1990, M60s were amongst the first Allied tanks to enter Kuwait City with the US Marines.This book examines the design and deployment of the M60, a very widely used vehicle that is still in service today.

Entering service in the early 1960s, the M60 tank was in production for 23 years and formed the backbone of US Army and Marine armoured units during the Cold War.Over 15,000 were built in four basic models: the M60, M60A1, M60A2, and the M60A3. Although the M60 had been phased out of US Army service by the time Iraq invaded Kuwait in 1990, M60s were amongst the first Allied tanks to enter Kuwait City with the US Marines.This book examines the design and deployment of the M60, a very widely used vehicle that is still in service today.

Destined to become one of the most influential postwar armored cars, the V-100 Commando was developed by the Cadillac Gage Company in 1962 as a private venture, and the first prototype was completed in the same year.It was designed as a multi-purpose vehicle and could function as an 11-man personnel carrier, reconnaissance vehicle, convoy escort, command or patrol car and a riot vehicle. The V-100 was tested and evaluated in Vietnam before full-scale production began in 1964. It saw widespread use in Vietnam by both US and South Vietnamese forces.This title describes the design, development and operational use of the V-100 Commando, including their continued deployment around the world.

Entering service in the early 1960s, the M60 tank was in production for 23 years and formed the backbone of US Army and Marine armoured units during the Cold War.Over 15,000 were built in four basic models: the M60, M60A1, M60A2, and the M60A3. Although the M60 had been phased out of US Army service by the time Iraq invaded Kuwait in 1990, M60s were amongst the first Allied tanks to enter Kuwait City with the US Marines.This book examines the design and deployment of the M60, a very widely used vehicle that is still in service today.