Security-Aware Systems Applications and Software Development Methods

With an increasing concern of personal data privacy in Hong Kong and around the world, the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong publishes this third edition of Personal Data (Privacy) Law in Hong Kong: A Practical Guide on Compliance to provide practical guidance on the law of privacy, and the ways to protect personal data in everyday life.This third edition will guide readers through the recent developments of personal data privacy in the local, regional and global contexts with updates on recent Administrative Appeals Board and Court decisions, and investigation reports and materials from the PCPD. In addition, some most-concerned issues are discussed, such as ethical development and use of AI, the collection and use of personal data by employers during COVID-19, data protection under work-from-home arrangements, data security measures for ICT systems, guidelines on doxxing offences and data breach handling. This book will certainly provide readers a

「對於那些參與系統開發或關注如何降低系統風險的人，這是一本必看的書籍」 -Alyssa Miller, 駭客暨資訊安全傳教士 「對於專注交付安全性設計的讀者，本書將威脅建模方法與現代軟體的開發方式保持一致，是一本全方面比較威脅建模技術的書籍。」 -Brook S.E. Schoenfield, 《Securing Systems: Applied Security Architecture and Threat Models》作者，資訊安全架構師 在軟體開發生命週期中，威脅建模往往是最基本但卻容易被誤解的一環。無論您是資訊安全從業人員或開發團隊成員，本書將幫助您更好地理解如何應用威脅建模的核心概念，在實務上保護您的系統免受威脅。 威脅建模技巧旨在編寫代碼之前，以具有成本效益的方式發現和解決潛在問題。使用威脅建模技術並不需要高階資安知識，也不需要付出鉅額維護成本。本書作者Izar Tarandach和Matthew J. Coles在本書中介紹了可以在您的組織中處理和執行威脅模型分析的各種方法。 ‧探索用以保護資料和系統功能的威脅建模基本特性及機制 ‧了解保護機制、隱私性、和安全性之間的關係 ‧識別評估系統安全性的關鍵特徵 ‧深入認識用於威脅模型分析系統的流行和專業技術 ‧眺望威脅建模、敏捷開發(Agile development methodologies)和開發維運自動化(DevOps automation)的未來發展 ‧查找常見問題的答案，包括如何避免常見的威脅建模陷阱

The Law of the People’s Republic of China on Safeguarding National Security in the Hong Kong SAR (the ‘NSL’) promises to be the most important legal development in Hong Kong since the advent of the Basic Law. Many wondered in the aftermath of the NSL how the foundations of Hong Kong’s system might be changed and in what way the freedoms valued by Hong Kong may be affected. Supporters view the law as essential for the preservation of public order and the national security of China and to support the fundamental well-being of “One Country, Two Systems”, an arrangement that has been in place since the return of Hong Kong to China. Critics fear an adverse impact on the spirit of “One Country, Two Systems”.From a discussion initiated by the University of Hong Kong’s Faculty of Law, this collection of essays brings together leading experts on Hong Kong and Chinese law to offer an exploratory study of the NSL and its impact on the legal system and the principle of the rule of law in Hong Kong

本書介紹微服務開發與部署的完整生命週期，涵蓋不可變容器、持續整合與持續部署、自動化伺服器佈署、零停機更新、回滾機制、系統擴充、自我修復架構、集中式日誌與叢集監控等主題。書中結合 Docker、Kubernetes、Ansible、Docker Swarm、Docker Compose、Consul、etcd 等工具，透過大量實作帶領讀者掌握現代 DevOps 與微服務架構的核心技術。This book is about different techniques that help us architect software in a better and more efficient way with microservices packed as immutable containers, tested and deployed continuously to servers that are automatically provisioned with configuration management tools. It's about fast, reliable and continuous deployments with zero-downtime and ability to roll-back. It's about scaling to any number of servers, design of self-healing systems capable of recuperation from both hardware and software failures and about centralized logging and monitoring of the cluster.In other words, this book envelops the whole microservices development and deployment lifecycle using some of the latest and greatest practices and tools. We'll use Docker, Kubernetes, Ansible, Ubuntu, Docker Swarm and Docker Compose,

Covering many techniques widely used in research, this book will help researchers in the physical sciences and engineering solve troublesome - and potentially very time consuming - problems in their work. The book deals with technical difficulties that often arise unexpectedly during the use of various common experimental methods, as well as with human error. It provides preventive measures and solutions for such problems, thereby saving valuable time for researchers. Some of the topics covered are: sudden leaks in vacuum systems, electromagnetic interference in electronic instruments, vibrations in sensitive equipment, and bugs in computer software. The book also discusses mistakes in mathematical calculations, and pitfalls in designing and carrying out experiments. Each chapter contains a summary of its key points, to give a quick overview of important potential problems and their solutions in a given area.

Cutting-edge techniques from leading Oracle security experts This Oracle Press guide demonstrates practical applications of the most compelling methods for developing secure Oracle database and middl