在线阅读本书

Get the definitive guide to writing more-secure code for Windows Vistafrom the authors of the award-winning Writing Secure Code, Michael Howard and David LeBlanc. This reference is ideal for developers who understand the fundamentals of Windows programming and APIs. It complements Writing Secure Code, examining the delta between Windows XP and Windows Vista security. You get first-hand insights into design decisions, lessons learned from Windows Vista development, and practical advice for solving real-world security issues. Discover how to: Develop applications to run without administrator privileges Apply best practices for using integrity controls Help protect your applications with ASLR, NX, and SafeSEH Evaluate authentication, authorization, and cryptography enhancements in Windows Vista Write services that restrict privileges and tokensand sidestep common problems Learn how Windows Internet Explorer 7 defenses and new security features affect your development efforts PLUSGet Microsoft Visual C#, Visual C++, and C code samples on the Web

Michael Howard，是Microsoft Security Engineering团队的高级安全程序主管，是该公司安全相关过程改进的架构师。他与David LeBlanc合著完成多部安全类专著，包括获奖的《编写安全的代码》，“19DeadlySins of Software Security”，以及“the Security Development Lifecycle”。他是IEEE Security and Privacy的一名编辑，也是Microsoft Press Secure Software Development series的丛书编辑。

David LeBlanc是Microsoft Office Division’s Trustworthy Computing团队里的资深开发员，还为Office提供与安全相关的建议，并与MichaeIHoward合著完成多部安全类专著。他在安全行业的许多方面都有所涉猎，从提供反欺诈咨询、领导屡获大奖的网络安全评估工具开发团队，到为Microsoft的网络安全团队提供渗透测试指导。他还是Trustworthy Computing Initiative团队的奠基人之一。