Official (ISC)2 Guide to the CSSLP CBK, 2nd Edition

The text allows readers to learn about software security from a renowned security practitioner who is the appointed software assurance advisor for (ISC)2. Complete with numerous illustrations, it makes complex security concepts easy to understand and implement. In addition to being a valuable resource for those studying for the CSSLP examination, this book is also an indispensable software security reference for those already part of the certified elite. A robust and comprehensive appendix makes this book a time-saving resource for anyone involved in secure software development.

Table of Contents

Domain 1: Secure Software Concepts
Domain 2: Secure Software Requirements
Domain 3: Secure Software Design
Domain 4: Secure Software Implementation/Coding
Domain 5: Secure Software Testing
Domain 6: Software Acceptance
Domain 7: Software Deployment, Operations, Maintenance, and Disposal
Domain 8: Supply Chain and Software Acquisition
Appendix A: Answers to Review Questions
Appendix B: Security Models
Appendix C: Threat Modeling
Appendix D: Commonly Used Opcodes in Assembly
Appendix E: HTTP/1.1 Status Codes and Reason Phrases (IETF RFC 2616)
Appendix F: Security Testing Tools