Title: Opinions asked on "The Art of Software Security Assessment"
Post by: Synquell on August 16, 2010, 06:36:40 AM

Hi everyone,

I'm thinking about buying this book, "The Art of Software Security Assessment". It gets highly recommended and seems to be an extremely interesting read regarding a sh*tload of aspects of security. According to some, it's a 1200 page security bible :)

Now that all sounds very well, but it's a rather old book, from November 2006.

So I was wondering; did any of you guys read this? And do you still find it very relevant today?
If not, are there other, similar, wide-coverage books out there that you would recommend instead?

The Amazon link of this book is:
http://www.amazon.com/Art-Software-Security-Assessment-Vulnerabilities/dp/0321444426

Cheers and thanks,

- Anquilas

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: BillV on August 16, 2010, 08:35:50 AM

Search around the site, I thought that Chris Gates did a review on this book somewhere.

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: Synquell on August 16, 2010, 09:43:48 AM

Thanks m8, but I did look around before posting though.

Chris did a book review on The Art of Software Security: Testing, but that's not the one that I'm after :)
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1993.0/
He does reference the book I'm after briefly, so maybe I should pm him either way.

The complete title of the one I'm looking for is:
"The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities"

(I do understand how those were confused though :) )

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: BillV on August 16, 2010, 01:31:53 PM

Yeah, I'm familiar with both books (I have them) but I guess I thought he compared them more than just the reference at the beginning. :-\

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: Synquell on August 17, 2010, 02:46:01 AM

Np :)
Seeing as you have both, do you have an opinion on the matter, whether the book is still relevant enough to read today?

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: UNIX on August 17, 2010, 03:11:54 AM

It's still worth the read. ;)

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: Synquell on August 17, 2010, 08:07:36 AM

Cheers awesec :)

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: BillV on August 20, 2010, 06:14:10 AM

Haha, yeah, guess I could have just answered your original question :P sorry - right over my head.

Yes, both books are still relevant. The one you're after has A LOT of code examples throughout on a variety of languages. Many, if not all, of the topics presented are definitely still useful for today.

I'm sure you've seen them but just in case, here are some more reviews:
http://books.google.com/books?sitesec=reviews&id=NdyNQgAACAAJ

I'd certainly recommend picking up a copy of this book.

Title: Re: Opinions asked on "The Art of Software Security Assessment"
Post by: Synquell on August 23, 2010, 09:55:52 AM

Thanks BillV, that was the answer I was hoping for :)
The reviews do speak for themselves, and now that I know that most of the content is still relevant, I'm gonna buy it asap.

Cheers!

EH-Net

Features => Book Reviews => Topic started by: Synquell on August 16, 2010, 06:36:40 AM