Customer Reviews


4 Reviews
5 star:
 (3)
4 star:
 (1)
3 star:    (0)
2 star:    (0)
1 star:    (0)
 
 
 
 
 
Average Customer Review
Share your thoughts with other customers
Create your own review
 
 
Most Helpful First | Newest First

5.0 out of 5 stars Excellent continuation or Whittaker's earlier book, March 7 2004
By 
Mike Tarrani "Jazz Drummer" (Deltona, FL USA) - See all my reviews
(TOP 1000 REVIEWER)    (REAL NAME)   
This review is from: How to Break Software Security (Paperback)
James Whittaker has taken the approach and the tools he introduced in "How to Break Software: A Practical Guide to Testing" (ISBN 0201796198), and has teamed with coauthor Herbert Thompson to adapt them to security testing. In this book the software under test (or attack, since that is the underlying approach) is primarily in the Microsoft environment. That the principles can be applied to any operating system or environment is evident in one scenario where Linux-based OpenOffice is attacked. The the fault model provided early in the book can form the basis for any software test strategy with a goal to uncover and exploit vulnerabilities.
The approach itself is to create a plan, then systematically attack. The areas of vulnerability covered include unanticipated input scenarios (which, even after decades, is still an exposure in too many applications and operating systems), find and attack design flaws and implementation anomalies, and leave no potential vulnerability untested. Among these are the usual exposed ports and default names; however, there are exploits based on data, time stamping and other less common areas that are overlooked by testing professionals - and that is one of the main audiences of this book.
While the techniques and the approach in this book are sound, I would have liked the attacks presented as formal test cases, which would be more meaningful to the testing professionals who will benefit the most from this book. However, the authors do introduce the concept of security testing as an element of QA, adding to the small (but hopefully growing) body of knowledge to be used by QA. I recommend this book, as well as "Exploiting Software: How to Break Code" (ISBN 0201786958) as two books that should be read and used by software testing practitioners. The information combined in these books will-if put into practice-significantly improve the quality and security of software that is released into production.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


5.0 out of 5 stars Required for those involved w/ software application security, Feb. 3 2004
This review is from: How to Break Software Security (Paperback)
'How to Break Software Security' is a most unique book.
There are a lot of security books.
There are a growing number of books about writing secure code.
But 'How to Break Software Security' is the first on the topic of testing the software after the programmer has supposedly used secure programming techniques.
The problem is that even if a programmer reads all of the required texts on writing secure code, there are still a number of ways that the application can be broken. The book deals with 19 unique attacks that can be mounted against various software applications.
The book describes attacks that can come from all sides. From attacking the software dependencies, implementation, design, to bogus error messages, fake data sources and more.
Anyone involved with software application security testing should definitely read 'How to Break Software Security'.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


5.0 out of 5 stars Whittaker strikes again!, May 30 2004
This review is from: How to Break Software Security (Paperback)
The software community has been awaiting for a book like this. It's a almost perfect intro to software security concepts. Again, Whittaker keeps it low in pages and words. In my opinion, the way books should be written (except ones purely theoretical).
Once again Whittaker approachs is hands-on examples. Even if some examples don't apply to modern software the idea behind you is to get you thinking. I've applied the techniques in this book with extremely great results. Thanks James!
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


4.0 out of 5 stars Another great book in this series. Should be on every testers shelf., July 25 2014
By 
S. P. Ashman (Vancouver, Canada) - See all my reviews
(REAL NAME)   
Verified Purchase(What's this?)
This review is from: How to Break Software Security (Paperback)
Great book! Inspires some great and very valuable testing.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


Most Helpful First | Newest First

This product

How to Break Software Security
How to Break Software Security by Herbert H. Thompson (Paperback - May 19 2003)
Used & New from: CDN$ 8.32
Add to wishlist See buying options
Only search this product's reviews