Alice and bob learn application security Ebook

This book covers security fundamentals, security requirements, secure design concepts, secure coding (plus a guideline they can keep), solutions to the OWASP Top Ten items not covered by the secure coding guidelines. It also covers the basics of threat modelling, security testing, how to build an AppSec program, modern application security concerns and mitigations, and security hygiene for software developers and other IT staff. The book ends with answers to common questions people starting in Application Security often have, as a conclusion to the book. It will also list resources where they can find more answers.Much of the approach of the book focuses on “pushing left” in AppSec, that is getting application security considerations built into the software development process as early as possible. Many of the examples in the book are illustrated by a fictional story of the characters of Alice and Bob as they learn the core concepts of application security, interspersed with code, exercises, examples. Written by Tanya “SheHacksPurple” Janca it features the same fun, entertaining, and easy writing style of her blog and numerous presentations.