Preface

This book explores the foundations of software security. We’ll consider important software vulnerabilities and attacks that exploit them – such as buffer overflows, SQL injection, and session hijacking – and defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we’ll take a “build security in” mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems.