在綫閱讀本書

Get the definitive guide to writing more-secure code for Windows Vistafrom the authors of the award-winning Writing Secure Code, Michael Howard and David LeBlanc. This reference is ideal for developers who understand the fundamentals of Windows programming and APIs. It complements Writing Secure Code, examining the delta between Windows XP and Windows Vista security. You get first-hand insights into design decisions, lessons learned from Windows Vista development, and practical advice for solving real-world security issues. Discover how to: Develop applications to run without administrator privileges Apply best practices for using integrity controls Help protect your applications with ASLR, NX, and SafeSEH Evaluate authentication, authorization, and cryptography enhancements in Windows Vista Write services that restrict privileges and tokensand sidestep common problems Learn how Windows Internet Explorer 7 defenses and new security features affect your development efforts PLUSGet Microsoft Visual C#, Visual C++, and C code samples on the Web

Michael Howard，是Microsoft Security Engineering團隊的高級安全程序主管，是該公司安全相關過程改進的架構師。他與David LeBlanc閤著完成多部安全類專著，包括獲奬的《編寫安全的代碼》，“19DeadlySins of Software Security”，以及“the Security Development Lifecycle”。他是IEEE Security and Privacy的一名編輯，也是Microsoft Press Secure Software Development series的叢書編輯。

David LeBlanc是Microsoft Office Division’s Trustworthy Computing團隊裏的資深開發員，還為Office提供與安全相關的建議，並與MichaeIHoward閤著完成多部安全類專著。他在安全行業的許多方麵都有所涉獵，從提供反欺詐谘詢、領導屢獲大奬的網絡安全評估工具開發團隊，到為Microsoft的網絡安全團隊提供滲透測試指導。他還是Trustworthy Computing Initiative團隊的奠基人之一。