Michael Howard – författare

Uppmaningen att lära av historien är välbekant. Men vad betyder det egentligen? Förespråkarna för tillämpad historia menar att historiska studier kan användas praktiskt och ge vägledning för framtiden. Beslutsfattare och politiker kan få perspektiv, hitta ledtrådar till vart en utveckling kan leda och bedöma vad ett agerande kan få för konsekvenser.

Men den tillämpade historiens ökade popularitet skymmer det faktum att historiker ända sedan antikens Grekland har analyserat de stora politiska, ekonomiska och militära frågorna med liknande perspektiv och tankesätt. Varje generation historiker har utvecklat sin forskning på basis av tidigare idéer och kunskap med målet att förstå sin samtid genom att studera det förflutna.

Klassiker inom tillämpad historia tar ett stort och ambitiöst grepp om hur historisk kunskap skapas, lärs ut och används under olika epoker. I boken presenteras ett brett urval av texter från till exempel Niccolò Machiavelli, E.H. Carr, Ernest May och Margaret MacMillan, som tillsammans skapar både överblick och insikt i detta ständigt aktuella ämne. Varje text introduceras och placeras i sitt historiska sammanhang av en nu verksam historiker.

Seasoned security leaders from Microsoft unveil a groundbreaking guide to threat-driven software development for defending online services from modern threat actors

Threat-Driven Software Development: Defending online services from modern threat actors is a practical, field-tested guide authored by Microsoft security leaders Michael Howard, Lee Holmes, Sherrod DeGrippo and Shawn Hernan. Drawing on decades of experience in threat intelligence, red teaming, and secure architecture at scale, the authors describe how to defend against what real adversaries actually do in the field and maps that knowledge through concrete engineering. Grounded in the Microsoft Secure Future Initiative (SFI), and threat intelligence, the book maps attacker behaviors to secure-by-design and secure-by-default principles, identity and secret protection, supply chain and engineering system hardening, isolation, monitoring and detection, and effective red team/response workflows. The book also shows how AI can be applied defensively; augmenting threat modeling, code review, threat detection and response, while helping software teams use AI to ship faster without compromising security. With concise, accessible chapters; each infused with real-world stories and threat intel, readers learn how to prioritize work against nation-state and criminal tradecraft, shape the defensive battlefield, and strengthen the human element. The result is a hands-on playbook that empowers developers and IT professionals to build resilient online services, measurably reduce risk, and stay ahead of modern threat actors.

About This Book

By reading this book, you will:

The admonition that we should learn from history is well known. But what does that actually mean?

Advocates of applied history argue that historical studies can be used in practice and provide guidance for the future. Decision-makers and political leaders can gain perspective, find clues to where a trend could lead, and assess what consequences an action could have.

But the growing popularity of applied history obscures the fact that ever since Ancient Greece, historians have analysed the big political, economic and military issues from similar perspectives and approaches. Each generation of historians has developed their research based on previous ideas and knowledge, with the goal of understanding their own era by studying the past. 

Classics of Applied History takes a broad and ambitious approach to how historical knowledge is created, taught and used in different periods. A wide range of texts are presented in the book, which together create an overview of, as well as insight into, this always topical subject.

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Understand and evaluate the delivery of Carrier Ethernet using different technologies

Carrier Ethernet is rapidly becoming the de facto platform for offering the next generation of high-bandwidth multimedia applications. Delivering Carrier Ethernet: Extending Ethernet Beyond the LAN provides, for the very first time, an in-depth assessment of the various network solutions that can be used to deliver Carrier Ethernet services. The book is based on extensive real-world deployments and is written by globally renowned experts. A standard solution framework is used consistently throughout to address each underlying technology, its benefits and pitfalls, deployment approaches, ongoing developments, economic assessments, and key vendors promoting the solution. The potential evolution of Carrier Ethernet itself is also considered in detail.

Understand and evaluate the delivery of Carrier Ethernet using different technologies

Carrier Ethernet is rapidly becoming the de facto platform for offering the next generation of high-bandwidth multimedia applications. Delivering Carrier Ethernet: Extending Ethernet Beyond the LAN provides, for the very first time, an in-depth assessment of the various network solutions that can be used to deliver Carrier Ethernet services. The book is based on extensive real-world deployments and is written by globally renowned experts. A standard solution framework is used consistently throughout to address each underlying technology, its benefits and pitfalls, deployment approaches, ongoing developments, economic assessments, and key vendors promoting the solution. The potential evolution of Carrier Ethernet itself is also considered in detail.

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Eradicate the Most Notorious Insecure Designs and Coding Vulnerabilities

Fully updated to cover the latest security issues, 24 Deadly Sins of Software Security reveals the most common design and coding errors and explains how to fix each one-or better yet, avoid them from the start. Michael Howard and David LeBlanc, who teach Microsoft employees and the world how to secure code, have partnered again with John Viega, who uncovered the original 19 deadly programming sins. They have completely revised the book to address the most recent vulnerabilities and have added five brand-new sins. This practical guide covers all platforms, languages, and types of applications. Eliminate these security flaws from your code:

"What makes this book so important is that it reflects the experiences of two of the industry''s most experienced hands at getting real-world engineers to understand just what they''re being asked for when they''re asked to write secure code. The book reflects Michael Howard''s and David LeBlanc''s experience in the trenches working with developers years after code was long since shipped, informing them of problems." --From the Foreword by Dan Kaminsky, Director of Penetration Testing, IOActive

Eradicate the Most Notorious Insecure Designs and Coding Vulnerabilities

Fully updated to cover the latest security issues, 24 Deadly Sins of Software Security reveals the most common design and coding errors and explains how to fix each one-or better yet, avoid them from the start. Michael Howard and David LeBlanc, who teach Microsoft employees and the world how to secure code, have partnered again with John Viega, who uncovered the original 19 deadly programming sins. They have completely revised the book to address the most recent vulnerabilities and have added five brand-new sins. This practical guide covers all platforms, languages, and types of applications. Eliminate these security flaws from your code:

Plan, build, and maintain highly secure Azure applications and workloads

As business-critical applications and workloads move to the Microsoft Azure cloud, they must stand up against dangerous new threats. That means you must build robust security into your designs, use proven best practices across the entire development lifecycle, and combine multiple Azure services to optimize security. Now, a team of leading Azure security experts shows how to do just that. Drawing on extensive experience securing Azure workloads, the authors present a practical tutorial for addressing immediate security challenges, and a definitive design reference to rely on for years. Learn how to make the most of the platform by integrating multiple Azure security technologies at the application and network layers— taking you from design and development to testing, deployment, governance, and compliance.

About You

This book is for all Azure application designers, architects, developers, development managers, testers, and everyone who wants to make sure their cloud designs and code are as secure as possible.

Discover powerful new ways to: