Threat Modeling
Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies. ...
Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies. ...
Practical Reverse Engineering
Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find with scary results. Now the good guys can use the same tools to thwart these threats. Practical Reverse Engineering goes under the hood of reverse engineering for security analysts, security engineers, and system programmers, so they can learn how to use these same processes to stop hackers in their tracks. The book covers x86, x64, and ARM (the first book to cover all three); Windows kernel-mode code rootkits and drivers; virtual machine protection techniques; and much more. Best of all, it offers a systematic approach to the material, with plenty of hands-on exercises and real-world examples. ...
Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find with scary results. Now the good guys can use the same tools to thwart these threats. Practical Reverse Engineering goes under the hood of reverse engineering for security analysts, security engineers, and system programmers, so they can learn how to use these same processes to stop hackers in their tracks. The book covers x86, x64, and ARM (the first book to cover all three); Windows kernel-mode code rootkits and drivers; virtual machine protection techniques; and much more. Best of all, it offers a systematic approach to the material, with plenty of hands-on exercises and real-world examples. ...
SonarQube in Action
SonarQube is a powerful open source tool for continuous inspection, a process that makes code quality analysis and reporting an integral part of the development lifecycle. Its unique dashboards, rule-based defect analysis, and tight build integration result in improved code quality without disruption to developer workflow. It supports many languages, including Java, C, C++, C#, PHP, and JavaScript. SonarQube in Action teaches you how to effectively use SonarQube following the continuous inspection model. This practical book systematically explores SonarQube's core Seven Axes of Quality (design, duplications, comments, unit tests, complexity, potential bugs, and coding rules). With well-chosen examples, it helps you learn to use SonarQube's review functionality and IDE integration to implement continuous inspection best practices in your own quality management process. ...
SonarQube is a powerful open source tool for continuous inspection, a process that makes code quality analysis and reporting an integral part of the development lifecycle. Its unique dashboards, rule-based defect analysis, and tight build integration result in improved code quality without disruption to developer workflow. It supports many languages, including Java, C, C++, C#, PHP, and JavaScript. SonarQube in Action teaches you how to effectively use SonarQube following the continuous inspection model. This practical book systematically explores SonarQube's core Seven Axes of Quality (design, duplications, comments, unit tests, complexity, potential bugs, and coding rules). With well-chosen examples, it helps you learn to use SonarQube's review functionality and IDE integration to implement continuous inspection best practices in your own quality management process. ...
EJB 3 in Action, 2nd Edition
The EJB 3 framework provides a standard way to capture business logic in manageable server-side modules, making it easier to write, maintain, and extend Java EE applications. EJB 3.2 provides more enhancements and intelligent defaults and integrates more fully with other Java technologies, such as CDI, to make development even easier. EJB 3 in Action, Second Edition is a fast-paced tutorial for Java EE business component developers using EJB 3.2, JPA, and CDI. It tackles EJB head-on through numerous code samples, real-life scenarios, and illustrations. Beyond the basics, this book includes internal implementation details, best practices, design patterns, performance tuning tips, and various means of access including Web Services, REST Services, and WebSockets. ...
The EJB 3 framework provides a standard way to capture business logic in manageable server-side modules, making it easier to write, maintain, and extend Java EE applications. EJB 3.2 provides more enhancements and intelligent defaults and integrates more fully with other Java technologies, such as CDI, to make development even easier. EJB 3 in Action, Second Edition is a fast-paced tutorial for Java EE business component developers using EJB 3.2, JPA, and CDI. It tackles EJB head-on through numerous code samples, real-life scenarios, and illustrations. Beyond the basics, this book includes internal implementation details, best practices, design patterns, performance tuning tips, and various means of access including Web Services, REST Services, and WebSockets. ...
Windows Runtime via C#
Delve inside the Windows Runtime - and learn best ways to design and build Windows Store apps. Guided by Jeffrey Richter, a recognized expert in Windows and .NET programming, along with principal Windows consultant Maarten van de Bospoort, you'll master essential concepts. And you'll gain practical insights and tips for how to architect, design, optimize, and debug your apps. ...
Delve inside the Windows Runtime - and learn best ways to design and build Windows Store apps. Guided by Jeffrey Richter, a recognized expert in Windows and .NET programming, along with principal Windows consultant Maarten van de Bospoort, you'll master essential concepts. And you'll gain practical insights and tips for how to architect, design, optimize, and debug your apps. ...
Building a Virtualized Network Solution
The vast majority of the book is focused on architecture and design, highlighting key design decisions and providing best practice advice and guidance relating to each major component of the solution. The remaining chapters are more operational and discuss how to deploy and how to manage some of the common changes that might need to be made post deployment. ...
The vast majority of the book is focused on architecture and design, highlighting key design decisions and providing best practice advice and guidance relating to each major component of the solution. The remaining chapters are more operational and discuss how to deploy and how to manage some of the common changes that might need to be made post deployment. ...
High Performance Python
Your Python code may run correctly, but you need it to run faster. By exploring the fundamental theory behind design choices, this practical guide helps you gain a deeper understanding of Python's implementation. You'll learn how to locate performance bottlenecks and significantly speed up your code in high-data-volume programs. How can you take advantage of multi-core architectures or clusters? Or build a system that can scale up and down without losing reliability? Experienced Python programmers will learn concrete solutions to these and other issues, along with war stories from companies that use high performance Python for social media analytics, productionized machine learning, and other situations. ...
Your Python code may run correctly, but you need it to run faster. By exploring the fundamental theory behind design choices, this practical guide helps you gain a deeper understanding of Python's implementation. You'll learn how to locate performance bottlenecks and significantly speed up your code in high-data-volume programs. How can you take advantage of multi-core architectures or clusters? Or build a system that can scale up and down without losing reliability? Experienced Python programmers will learn concrete solutions to these and other issues, along with war stories from companies that use high performance Python for social media analytics, productionized machine learning, and other situations. ...
Force.com Development Blueprints
No one can dispute the sheer power and breadth of the Force.com cloud development platform and its influence on thousands of developers across the world. The staggering number of technologies on offer can cause confusion among developers when it comes to using them to build real-world applications. Starting with how to develop a Salesforce community, you will begin a whirlwind tour across the Force.com platform, using it to build applications for the e-commerce, CRM, reporting, and mobile subject domains. ...
No one can dispute the sheer power and breadth of the Force.com cloud development platform and its influence on thousands of developers across the world. The staggering number of technologies on offer can cause confusion among developers when it comes to using them to build real-world applications. Starting with how to develop a Salesforce community, you will begin a whirlwind tour across the Force.com platform, using it to build applications for the e-commerce, CRM, reporting, and mobile subject domains. ...
Learn Windows IIS in a Month of Lunches
When your website slows to a crawl or Exchange stops sending internet mail, you have to get things working again. Fast. IIS is the communication gateway for most Microsoft servers as well as the primary technology for publishing web sites. Learning to manage it effectively means you can keep your systems running smoothly and go home on time. Learn Windows IIS in a Month of Lunches is an innovative tutorial designed for busy administrators. Follow the crisp explanations, examples, and exercises in this concise, easy-to-read book, and you'll be managing, securing, and automating IIS faster than you thought possible. You'll start with IIS fundamentals, and then systematically explore web farm design, website management, and high availability, along with practices to keep your Exchange, SharePoint, System Center, and Lync servers running smoothly. ...
When your website slows to a crawl or Exchange stops sending internet mail, you have to get things working again. Fast. IIS is the communication gateway for most Microsoft servers as well as the primary technology for publishing web sites. Learning to manage it effectively means you can keep your systems running smoothly and go home on time. Learn Windows IIS in a Month of Lunches is an innovative tutorial designed for busy administrators. Follow the crisp explanations, examples, and exercises in this concise, easy-to-read book, and you'll be managing, securing, and automating IIS faster than you thought possible. You'll start with IIS fundamentals, and then systematically explore web farm design, website management, and high availability, along with practices to keep your Exchange, SharePoint, System Center, and Lync servers running smoothly. ...
Learning Android Game Programming
The book starts with an up-to-the-minute overview of today's Android mobile games marketplace, reviews each leading genre, and teaches you the foundational concepts of game development. You'll design a simple game, then master every step of game development with AndEngine—the powerful, open source, free game-development engine. Every chapter teaches with sample code you can actually use, including many examples drawn from the published game, Virgins Versus Vampires (V3). ...
The book starts with an up-to-the-minute overview of today's Android mobile games marketplace, reviews each leading genre, and teaches you the foundational concepts of game development. You'll design a simple game, then master every step of game development with AndEngine—the powerful, open source, free game-development engine. Every chapter teaches with sample code you can actually use, including many examples drawn from the published game, Virgins Versus Vampires (V3). ...