{"title":"Fred Long","description":null,"products":[{"product_id":"cert-oracle-secure-coding-standard-for-java-the-book-fred-long-9780321803955","title":"CERT Oracle Secure Coding Standard for Java, The","description":"\u003cp\u003e“In the Java world, security is not viewed as an add-on a feature. It is a pervasive way of thinking. Those who forget to think in a secure mindset end up in trouble. But just because the facilities are there doesn’t mean that security is assured automatically. A set of standard practices has evolved over the years. \u003cstrong\u003e\u003cem\u003eThe Secure® Coding® Standard for JavaTM\u003c\/em\u003e\u003c\/strong\u003e is a compendium of these practices. These are not theoretical research papers or product marketing blurbs. This is all serious, mission-critical, battle-tested, enterprise-scale stuff.”\u003c\/p\u003e \u003cp\u003e—\u003cstrong\u003eJames A. Gosling,\u003c\/strong\u003e Father of the Java Programming Language\u003c\/p\u003e \u003cp\u003eAn essential element of secure coding in the Java programming language is a well-documented and enforceable coding standard. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization, rather than by the programmer’s familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes).\u003c\/p\u003e \u003cp\u003e\u003cstrong\u003e\u003cem\u003eThe CERT® Oracle® Secure Coding Standard for JavaTM\u003c\/em\u003e\u003c\/strong\u003e provides rules designed to eliminate insecure coding practices that can lead to exploitable vulnerabilities. Application of the standard’s guidelines will lead to higher-quality systems–robust systems that are more resistant to attack. Such guidelines are required for the wide range of products coded in Java–for devices such as PCs, game players, mobile phones, home appliances, and automotive electronics.\u003c\/p\u003e \u003cp\u003eAfter a high-level introduction to Java application security, seventeen consistently organized chapters detail specific rules for key areas of Java development. For each area, the authors present noncompliant examples and corresponding compliant solutions, show how to assess risk, and offer references for further information. Each rule is prioritized based on the severity of consequences, likelihood of introducing exploitable vulnerabilities, and cost of remediation.\u003c\/p\u003e \u003cp\u003eThe standard provides secure coding rules for the Java SE 6 Platform including the Java programming language and libraries, and also addresses new features of the Java SE 7 Platform. It describes language behaviors left to the discretion of JVM and compiler implementers, guides developers in the proper use of Java’s APIs and security architecture, and considers security concerns pertaining to standard extension APIs (from the javax package hierarchy).The standard covers security issues applicable to these libraries: lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I\/O, JMX, JNI, Math, Serialization, and JAXP.\u003c\/p\u003e","brand":"WoB","offers":[{"title":"US \/ GOOD \/ SBYB","offer_id":49683624919313,"sku":"CIN0321803957G","price":0.0,"currency_code":"GBP","in_stock":false},{"title":"GB \/ VERY_GOOD \/ INTERNAL","offer_id":49849435816209,"sku":"GOR004815771","price":0.0,"currency_code":"GBP","in_stock":false},{"title":"US \/ WELL_READ \/ SBYB","offer_id":50350280638737,"sku":"CIN0321803957A","price":0.0,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0784\/4072\/6801\/files\/0321803957.jpg?v=1786110553"},{"product_id":"java-coding-guidelines-book-fred-long-9780321933157","title":"Java Coding Guidelines","description":"A must-read for all Java developers. . . . Every developer has a responsibility to author code that is free of significant security vulnerabilities. This book provides realistic guidance to help Java developers implement desired functionality with security, reliability, and maintainability goals in mind.  Mary Ann Davidson, Chief Security Officer, Oracle Corporation Organizations worldwide rely on Java code to perform mission-critical tasks, and therefore that code must be reliable, robust, fast, maintainable, and secure.  Java Coding Guidelines  brings together expert guidelines, recommendations, and code examples to help you meet these demands. Written by the same team that brought you The CERT(r) Oracle (r) Secure Coding Standard for Java,  this guide extends that previous work s expert security advice to address many additional quality attributes. You ll find 75 guidelines, each presented consistently and intuitively. For each guideline, conformance requirements are specified; for most, noncompliant code examples and compliant solutions are also offered. The authors explain when to apply each guideline and provide references to even more detailed information. Reflecting pioneering research on Java security,  Java Coding Guidelines  offers updated techniques for protecting against both deliberate attacks and other unexpected events. You ll find best practices for improving code reliability and clarity, and a full chapter exposing common misunderstandings that lead to suboptimal code.  With a Foreword by James A. Gosling, Father of the Java Programming Language","brand":"WoB","offers":[{"title":"US \/ GOOD \/ SBYB","offer_id":49862031081745,"sku":"CIN032193315XG","price":0.0,"currency_code":"GBP","in_stock":false},{"title":"US \/ VERY_GOOD \/ SBYB","offer_id":50348228083985,"sku":"CIN032193315XVG","price":0.0,"currency_code":"GBP","in_stock":false},{"title":"US \/ WELL_READ \/ SBYB","offer_id":50350968275217,"sku":"CIN032193315XA","price":0.0,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0784\/4072\/6801\/files\/032193315X.jpg?v=1751195945"},{"product_id":"so-you-want-to-get-well-book-fred-long-9781494712518","title":"So... You Want to Get Well?","description":null,"brand":"WoB","offers":[{"title":"- \/ - \/ -","offer_id":51673315737873,"sku":"","price":0.0,"currency_code":"GBP","in_stock":true},{"title":"US \/ NEW \/ INGRAM","offer_id":51673315934481,"sku":"NIN9781494712518","price":0.0,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0784\/4072\/6801\/files\/1494712512.jpg?v=1751372106"},{"product_id":"tales-from-one-blade-of-grass-book-fred-long-9781494807962","title":"Tales from One Blade of Grass","description":null,"brand":"WoB","offers":[{"title":"- \/ - \/ -","offer_id":51673731072273,"sku":"","price":0.0,"currency_code":"GBP","in_stock":true},{"title":"US \/ NEW \/ INGRAM","offer_id":51673731367185,"sku":"NIN9781494807962","price":0.0,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0784\/4072\/6801\/files\/1494807963.jpg?v=1750924167"},{"product_id":"software-engineering-environments-book-fred-long-9783540534525","title":"Software Engineering Environments","description":"This volume gives the proceedings of an international workshop on software engineering environments and public tool interfaces. The workshop drew together the recognized experts in these fields from Europe and America. The workshop examined the mechanisms necessary to support the software process and some formalisms for software modeling and considered which mechanisms and capabilities are feasible in the short term. Important here are the communication and coordination requirements of teams of people, especially information flow and access issues and the characterization of project and organization structure that interact with these. Some recent work on long transactions is included here. There was discussion of how tools obtain access to services provided by other tools in the environment and how they communicate and exchange information. The workshop considered the trade-off between ease of interoperability and the modification of existing tools. Data typing and structuring models present a significant challenge. Included here is the experience of using actual models and an analysis of persistence. The users of an environment may act in various roles and the needs of each type of user vary. Discussions centered on designs of environment mechanisms to support the user interface, including the issues of uniformity and performance.","brand":"WoB","offers":[{"title":"- \/ - \/ INTERNAL","offer_id":52327417676049,"sku":null,"price":0.0,"currency_code":"GBP","in_stock":true},{"title":"GB \/ NEW \/ INGRAM","offer_id":52327418298641,"sku":"NLS9783540534525","price":0.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0784\/4072\/6801\/files\/9783540534525.jpg?v=1789482772"}],"url":"https:\/\/www.worldofbooks.com\/en-gb\/collections\/author-books-by-fred-long.oembed","provider":"World of Books ","version":"1.0","type":"link"}