Acknowledgments

We would like to thank the many people who contributed ideas, technical insights, and other feedback to the contents of the book. The following people graciously volunteered their time and reviewed portions of the book: Atin Bansal, Srijan Chakraborty, Shawn Farkas, Stephen Fisher, Greg Foltz, Raul Garcia, Greg Hartrell, Eric Jarvi, Chris Jeuell, Hidetake Jo, Akhil Kaza, Ariel Kirsman, Alex Krawarik, John Lambert of the Secure Windows Initiative Team, John Lambert of the Web Services Team, Ivan Medvedev, Bala Neerumalla, Maurice Prather, Walter Pullen, Yong Qu, David Ross, Micky Snir, Peter Torr, Ambrose Treacy, Don Willits, and Oleh Yuschuk.

The following people deserve special recognition for their efforts. Christopher Edwards of the Microsoft Security Response Center carefully reviewed and provided feedback on Chapter 20, Reporting Security Bugs, Jason Geffner examined Chapter 17, Reverse Engineering, for correctness and raised additional legal concerns. Sean Hunt and Mark Iler reviewed and provided feedback on more chapters than we could have ever hoped. Alan Myrvold generously and carefully reviewed almost every page of the book; he also provided comments and suggestions that included additional sources of information.

The book refers to two previously unreleased tools that were written by Microsoft employees who graciously allowed us to include the tools on the books companion Web site: the MITM tool was written by Jiri Richter, and the ObjSD tool was written by Vikram Subramanian. Both tools are incredibly useful. We extend thanks for allowing us to make these publicly available. Thanks also to Mark Russinovich for answering our questions about the Sysinternals tools and for even making a small modification to Process Explorer.

Imran Akhtar, Matt Cohen, Grant George, David Hansen, David LeBlanc, Mark Mortimore, Tara Roth, and Matt Thomlinson deserve special mention for supporting our testing activities and book proposal. David LeBlanc was especially good at helping us express the importance of security testing. Ben Ryan (acquisitions editor), Kathleen Atkins (project editor), Christina Palaia (copy editor), William Teel (art), and Chris Weber (technical editor) have each done a great job making our writing more understandable, grammatically correct, and technically accurate.