Kindle Price: $38.99

Save $13.00 (25%)

Promotions apply when you purchase

These promotions will be applied to this item:

Some promotions may be combined; others are not eligible to be combined with other offers. For details, please see the Terms & Conditions associated with these promotions.

eBook features:
  • Highlight, take notes, and search in the book
Read with our free app
You've subscribed to ! We will preorder your items within 24 hours of when they become available. When new books are released, we'll charge your default payment method for the lowest price available during the pre-order period.
Update your device or payment method, cancel individual pre-orders or your subscription at
Your Memberships & Subscriptions

Buy for others

Give as a gift or purchase for a team or group.
Learn more

Buying and sending eBooks to others

  1. Select quantity
  2. Buy and send eBooks
  3. Recipients can read on any device

These ebooks can only be redeemed by recipients in the US. Redemption links and eBooks cannot be resold.
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

Amazon book clubs early access
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Amazon book clubs early access

Join or create book clubs

Choose books together

Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Explore Amazon Book Clubs

Follow the author

Robert C. Seacord
Follow
Something went wrong. Please try your request again later.

Secure Coding in C and C++ (SEI Series in Software Engineering) 2nd Edition, Kindle Edition

by Robert C. Seacord (Author) Format: Kindle Edition
4.5 4.5 out of 5 stars 64 ratings
See all formats and editions
Learn the Root Causes of Software Vulnerabilities and How to Avoid Them

 

Commonly exploited software vulnerabilities are usually caused by avoidable software defects. Having analyzed tens of thousands of vulnerability reports since 1988, CERT has determined that a relatively small number of root causes account for most of the vulnerabilities.

 

Secure Coding in C and C++, Second Edition, identifies and explains these root causes and shows the steps that can be taken to prevent exploitation. Moreover, this book encourages programmers to adopt security best practices and to develop a security mindset that can help protect software from tomorrow’s attacks, not just today’s. Drawing on the CERT’s reports and conclusions, Robert C. Seacord systematically identifies the program errors most likely to lead to security breaches, shows how they can be exploited, reviews the potential consequences, and presents secure alternatives.

 

Coverage includes technical detail on how to

  • Improve the overall security of any C or C++ application
  • Thwart buffer overflows, stack-smashing, and return-oriented programming attacks that exploit insecure string manipulation logic
  • Avoid vulnerabilities and security flaws resulting from the incorrect use of dynamic memory management functions
  • Eliminate integer-related problems resulting from signed integer overflows, unsigned integer wrapping, and truncation errors
  • Perform secure I/O, avoiding file system vulnerabilities
  • Correctly use formatted output functions without introducing format-string vulnerabilities
  • Avoid race conditions and other exploitable vulnerabilities while developing concurrent code

 

The second edition features

  • Updates for C11 and C++11
  • Significant revisions to chapters on strings, dynamic memory management, and integer security
  • A new chapter on concurrency
  • Access to the online secure coding course offered through Carnegie Mellon’s Open Learning Initiative (OLI)

 

Secure Coding in C and C++, Second Edition, presents hundreds of examples of secure code, insecure code, and exploits, implemented for Windows and Linux. If you’re responsible for creating secure C or C++ software–or for keeping it safe–no other book offers you this much detailed, expert assistance.

 

Previous page
  1. ISBN-13
    978-0321822130
  2. Edition
    2nd
  3. Sticky notes
    On Kindle Scribe
  4. Publisher
    Addison-Wesley Professional
  5. Publication date
    March 23, 2013
  6. Part of series
    SEI Series in Software Engineering
  7. Language
    English
  8. File size
    50430 KB
  9. See all details
Next page
Due to its large file size, this book may take longer to download
Add a debit or credit card to save time when you check out
Convenient and secure with 2 clicks. Add your card
All 22 available for you in this series See full series
See included books
Total Price: $802.81
By clicking on above button, you agree to the Kindle Store Terms of Use

Editorial Reviews

About the Author

Robert C. Seacord is currently the Secure Coding Technical Manager in the CERT Program of Carnegie Mellon’s Software Engineering Institute (SEI). He is the author or coauthor of five books, including The CERT® C Secure Coding Standard (Addison-Wesley, 2009), and is the author and instructor of a video training series, Professional C Programming LiveLessons, Part I: Writing Robust, Secure, Reliable Code (Addison-Wesley, 2013).

Product details

  • ASIN ‏ : ‎ B00C0OBZI0
  • Publisher ‏ : ‎ Addison-Wesley Professional; 2nd edition (March 23, 2013)
  • Publication date ‏ : ‎ March 23, 2013
  • Language ‏ : ‎ English
  • File size ‏ : ‎ 50430 KB
  • Simultaneous device usage ‏ : ‎ Up to 5 simultaneous devices, per publisher limits
  • Text-to-Speech ‏ : ‎ Enabled
  • Screen Reader ‏ : ‎ Supported
  • Enhanced typesetting ‏ : ‎ Enabled
  • X-Ray ‏ : ‎ Not Enabled
  • Word Wise ‏ : ‎ Not Enabled
  • Sticky notes ‏ : ‎ On Kindle Scribe
  • Print length ‏ : ‎ 1210 pages
  • Customer Reviews:
    4.5 4.5 out of 5 stars 64 ratings

About the author

Follow authors to get new release updates, plus improved recommendations.
Robert C. Seacord

Robert C. Seacord

Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.

Robert C. Seacord is a computer scientist, computer security specialist, and writer. He is the author of books on computer security, legacy system modernization, and component-based software engineering. He has a Bachelor in computer science from Rensselaer Polytechnic Institute.

Robert C. Seacord manages the Secure Coding Initiative at CERT, located in Carnegie Mellon’s Software Engineering Institute (SEI) in Pittsburgh, PA. CERT, among other security related activities, regularly analyzes software vulnerability reports and assesses the risk to the Internet and other critical infrastructure. Robert is an adjunct professor in the Carnegie Mellon University School of Computer Science and in the Information Networking Institute.

Robert started programming professionally for IBM in 1982, working in communications and operating system software, processor development, and software engineering. Robert also has worked at the X Consortium, where he developed and maintained code for the Common Desktop Environment and the X Window System.

Customer reviews

4.5 out of 5 stars
4.5 out of 5
64 global ratings

Top reviews from the United States

Michael J. Reeves
5.0 out of 5 stars An excellent text on coding to create "hacker-proof" software...
Reviewed in the United States on October 8, 2013
Verified Purchase
This is an excellent text offering an overview of all the various ways that programmers leave holes in their software that malicious hackers (Black Hat Hackers) can use to attack software. The simple examples demonstrate how a malicious hacker would write code to attack your system, and infiltrate your systems to gather information for criminal activity or use.

The author includes suggestions and examples of how to avoid programming these types of vulnerabilities into your software projects.

In today's age, more often than not, fixing "bugs" in programs is based on the business model of a Return-On-Investment (ROI). As a result, coding vulnerabilities are often left in place to avoid the expense and time required to track issues, re-code, and test the software.

Unfortunately, after reading this text, I realize that the problems didn't start with the business model, but with how programmers are trained. Beginning students of programming are not made aware of the concerns presented in this text, and how to correct for them until much later, IF at all, in their training.

As a result, students will form bad-habits in their coding paradigm that this text addresses.

This text or similar needs to be a mandate for beginning programmers. I, certainly, wish that my professors and mentors had brought the topics contained in this book to my attention as a beginning student in the field.

This text has a permanent place in my library.

Respectfully,

MJR
13 people found this helpful
Helpful
 Report
Michael Gautier
5.0 out of 5 stars Suitable for All Backgrounds
Reviewed in the United States on June 24, 2014
Verified Purchase
You could probably read the book in about 2 - 4 days. The writing style is clean, concise, and straightforward. While there are code examples in C and C++, you could easily understand nearly everything the author says about security (if you have a programming background in general). What he says is spot on and combines a fair amount of software code security knowledge in one place. What is important is to be aware of several of these issues which could assist you in evaluating software, understanding some of the risks with software, and if you write code (even if it is in Java, C#, Ruby, PHP or whatever) to be aware of the consequences of certain code writing styles and choices.
7 people found this helpful
Helpful
 Report
Anonymous Customer
4.0 out of 5 stars Good Orientation on Secure Coding
Reviewed in the United States on August 30, 2013
Verified Purchase
This is a good start into thinking more securely as a programmer. I think it's important knowledge if you regularly program in C/C++. Everyone who's used the language knows that "pointers can get you into trouble," but knowing exactly what can be used against your lack of oversight is a much more concrete motivation to pay attention. If you're one of those punk kids who always wants to know why you follow proper practices, read it. These languages give you freedom under the assumption you know what you're doing, and this book definitely helps.

That said, I think while its initial impact is significant, it's value drops significantly after the first read, as its lessons are more philosophical than a reference. Unless you're loaning it out to punk kids you work with who need to stop recklessly managing memory. If you or someone you know thinks C is anything but a cold harsh mistress with no more attachment to you than your goldfish, this book is probably for you.

An intermediate knowledge of a C language is necessary, although I'd say memory of irresponsible design decisions helps reinforce the material better.
4 people found this helpful
Helpful
 Report
alex bires
5.0 out of 5 stars Great Book
Reviewed in the United States on March 4, 2014
Verified Purchase
This book is great. It not only goes through how to program c and c++ securely but also discusses how to exploit conditions that occur when these guidelines aren't followed. You will need to know both languages because the book doesn't go in detail to the languages but that is to be expected.
4 people found this helpful
Helpful
 Report
Shahzad Aslam-Mir
5.0 out of 5 stars interesting things to be learnt from in here....
Reviewed in the United States on April 29, 2015
Verified Purchase
Must read, does some excellent coverage of some code constructs for security. Lots to learn in here.
2 people found this helpful
Helpful
 Report
M. Overton
3.0 out of 5 stars The material about secure programming is fine, but I would like more of that and ...
Reviewed in the United States on April 26, 2018
Verified Purchase
I suspect that over half the material is background about aspects of programming. So much so that this book could almost serve as a reference to the C language and its libraries. The material about secure programming is fine, but I would like more of that and less of the other.
4 people found this helpful
Helpful
 Report
Alexandr
5.0 out of 5 stars Good book about interesting things
Reviewed in the United States on August 20, 2013
Verified Purchase
Book completely meets all your requirements. I am really glad that I have this book in the my collection now.
2 people found this helpful
Helpful
 Report
Olegario
4.0 out of 5 stars Recommended
Reviewed in the United States on March 28, 2014
Verified Purchase
Deep in language and security aspects. Good learning for pratice of programming. More exemples is need to best understand. Have fun!
Helpful
 Report

Top reviews from other countries

Ash
4.0 out of 5 stars A Must-have for C/C++ Developers & Security Engineers
Reviewed in Germany on October 12, 2022
Verified Purchase
Most notable feature of the book, is that it explains the language-specific background before explaining the security issue. This is very useful for people who are doing security reviews but aren't much experienced with the details of C/C++.
Overall, you could use it as a reference to better understand (and therefore analyze) many vulnerable C/C++ code you may face.
One person found this helpful
 Report
K Smith
5.0 out of 5 stars Five Stars
Reviewed in the United Kingdom on October 31, 2016
Verified Purchase
A really good book on software security. It also covers C++11.
Report
hugh
5.0 out of 5 stars Five Stars
Reviewed in Canada on March 9, 2016
Verified Purchase
I like it
Report
mdub
2.0 out of 5 stars Mostly for C and Linux
Reviewed in Canada on April 23, 2016
Verified Purchase
Dont expect much C++ or Windows material here. The bulk of the book is dedicated to an explenation of buffer overflows using C-style programming (static arrays, raw pointers and Linux API), pointer and integer overflows too.

A C++ programmer will find very little here since the language and programming style inherently avoids many of the pitfalls described. Also there are very few examples using Windows API
Report
LR
2.0 out of 5 stars Too much detail
Reviewed in the United Kingdom on August 4, 2021
Verified Purchase
Excrutiating. Move on already!
Report
Report an issue

Does this item contain inappropriate content?
Report
Do you believe that this item violates a copyright?
Report
Does this item contain quality or formatting issues?
Report