13.10 Recommended Secure Development Reading

Prevention is the best form of protection from application-level threats such as overflows and logic flaws. The following four books discuss secure programming techniques and approaches (primarily with C programming examples across Unix and Windows platforms):

• Writing Secure Code, by Michael Howard and David LeBlanc (Microsoft Press)

• Secure Coding: Principles and Practices, by Mark Graff and Kenneth van Wyk (O'Reilly Media, Inc.)

• Building Secure Software, by Gary McGraw and John Viega (Addison Wesley)

• Secure Programming Cookbook for C and C++, by Matt Messier and John Viega (O'Reilly)