商品簡介
Software security has been vexing developers for more than 50 years and the problems developers face grow every day. A typical car today contains systems with 100 million lines of code that have been worked on by thousands of programmers at dozens of suppliers. While every line of code and every type of access can't be locked down, there are basic models that developers can follow.
These models - such as STRIDE - can seem academic, formal, and hard to understand or apply to day to day problems. But, each element of STRIDE - spoofing, tampering, repudiation, information disclosure, denial of service, and expansion of authority - has surprising parallels to situations every developer will recognize from their favorite galactic space opera of all time.
Adm Shostack's Threats: What Every Engineer Should Learn from Star Wars mixes Adam's decades of deep knowledge of implementing processes to minimize threats and teaching others to do the same with just enough references to Ben Kenobi, R2 D2, the Death Star, and Darth Vader to make this short book an immensely fun and useful read.
