Beyond the Patch

Finding and Defending Against Modern Software Vulnerabilities

Introduction: The Patch Is Not the Goal

1. What This Book Covers
2. Who Should Read This Book
3. How to Use This Book
4. The Central Argument

Chapter 1: The Anatomy of a Software Vulnerability

1. What Is a Vulnerability
2. Vulnerabilities, Threats, Risks and Attacks
3. The Persistence Problem
4. Classes, Patterns and Taxonomies
5. From Bug to Vulnerability to Exploit

Chapter 2: Attack Surfaces, Trust Boundaries and Security Architecture

1. Defining and Mapping Attack Surfaces
2. Trust Boundaries and the Principle of Least Privilege
3. Defense in Depth and Security Layers
4. Secure Architecture Patterns
5. The Cost of Architectural Debt

Chapter 3: Threat Modeling and Risk Assessment

1. What Threat Modeling Actually Does
2. Structured Threat Modeling Frameworks
3. Attack Trees and Attack Graphs
4. Quantitative and Qualitative Risk Assessment
5. Integrating Threat Models into Development

Chapter 4: The Vulnerability Lifecycle

1. When Vulnerabilities Are Introduced
2. Discovery Channels
3. Disclosure Policies and Coordinated Disclosure
4. Patch Development and Deployment
5. Exploitation and Afterlife

Chapter 5: Memory Corruption Foundations

1. Stack, Heap and Program Memory
2. Undefined Behavior and the C Memory Model
3. Compiler Optimizations and Security
4. Hardware Mitigations and ASLR
5. The Exploitation Chain

Chapter 6: Buffer Overflows and Stack Exploitation

1. Stack-Based Buffer Overflows
2. Return Address Hijacking
3. Shellcode and Code Injection
4. Stack Canaries and Stack Protectors
5. Modern Stack Exploitation Bypasses

Chapter 7: Heap Exploitation and Use-After-Free

1. How Heaps Work and Why They Are Dangerous
2. Use-After-Free Vulnerabilities
3. Double-Free and Heap Metadata Corruption
4. Heap Spraying and Feng Shui
5. Hardened Allocators and Heap Protections

Chapter 8: Race Conditions and Concurrency Vulnerabilities

1. Time-of-Check to Time-of-Use
2. Thread Safety and Locking Failures
3. File System and Network Race Conditions
4. Kernel and Privileged Context Races
5. Detecting and Preventing Race Conditions

Chapter 9: Injection Vulnerabilities

1. The Injection Paradigm
2. SQL Injection Mechanics
3. OS Command and Shell Injection
4. Path Traversal and Directory Escapes
5. Parameterization and Safe Patterns

Chapter 10: Broken Authentication and Authorization

1. Authentication Design Failures
2. Session Management Vulnerabilities
3. Broken Access Control and Privilege Escalation
4. Insecure Direct Object References
5. JWT and Modern Authentication Pitfalls

Chapter 11: Cross-Site Scripting and Browser-Based Attacks

1. The XSS Spectrum
2. DOM-Based XSS and Client-Side Injection
3. Same-Origin Policy and Its Evasion
4. Content Security Policy
5. Prototype Pollution and JavaScript Risks

Chapter 12: Cross-Site Request Forgery and API Vulnerabilities

1. Cross-Site Request Forgery
2. REST API Vulnerability Patterns
3. GraphQL-Specific Risks
4. WebSockets and Real-Time API Flaws
5. API Authentication and Rate Limiting Failures

Chapter 13: Insecure Deserialization and Data Processing

1. Why Deserialization Is Dangerous
2. Java Deserialization Gadget Chains
3. PHP and Python Deserialization Flaws
4. Server-Side Template Injection
5. XML External Entity and Markup Processing

Chapter 14: Cryptographic Vulnerabilities

1. Algorithmic and Protocol Weaknesses
2. Key Management Failures
3. Implementation Vulnerabilities
4. Side-Channel Attacks
5. Cryptographic Agility and Migration

Chapter 15: Server-Side Request Forgery and Network-Level Flaws

1. Server-Side Request Forgery
2. HTTP Request Smuggling
3. DNS Rebinding and Resolution Attacks
4. Proxy and Load Balancer Vulnerabilities

Chapter 16: Cloud, Container and Microservice Vulnerabilities

1. Cloud Provider Misconfigurations
2. Container Escape Vulnerabilities
3. Kubernetes Security Issues
4. Microservice Authentication and Segmentation
5. Infrastructure as Code Risks

Chapter 17: Mobile and Cross-Platform Vulnerabilities

1. Mobile Attack Surfaces
2. Insecure Data Storage and Transmission
3. Inter-Process Communication Vulnerabilities
4. WebView and JavaScript Bridge Flaws
5. Cross-Platform Framework Risks

Chapter 18: Operating System and Firmware Vulnerabilities

1. Kernel Vulnerabilities and Privilege Escalation
2. Driver-Level Security Failures
3. Bootloader and UEFI Vulnerabilities
4. Firmware and Embedded System Flaws
5. Hardware-Assisted Security and Its Limits

Chapter 19: Software Supply Chain and Dependency Vulnerabilities

1. The Dependency Problem
2. Package Repository Compromise
3. Build System and CI/CD Vulnerabilities
4. Software Composition Analysis
5. Supply Chain Attack Defense Strategies

Chapter 20: AI and Machine Learning System Vulnerabilities

1. Adversarial Examples and Model Evasion
2. Data Poisoning and Training Attacks
3. Model Extraction and Inversion
4. Prompt Injection and LLM-Specific Flaws
5. Securing AI Systems and Pipelines

Chapter 21: Static Analysis and Source Code Auditing

1. Static Analysis Fundamentals
2. Tool Categories and Techniques
3. Manual Code Review Methodology
4. Integrating SAST into CI/CD
5. False Positives, False Negatives and Validation

Chapter 22: Dynamic Analysis, Fuzzing and Runtime Instrumentation

1. Dynamic Analysis Approaches
2. Fuzzing Methodology and Tools
3. Runtime Instrumentation Techniques
4. Combining Dynamic and Static Analysis

Chapter 23: Reverse Engineering and Binary Analysis

1. Reverse Engineering Fundamentals
2. Static and Dynamic Binary Analysis
3. Vulnerability Identification in Compiled Code
4. The Skills Required for Binary Analysis

Chapter 24: The Vulnerability Management Lifecycle

1. Discovery and Triage
2. Severity Assessment and Exploitability Analysis
3. Risk-Based Prioritization
4. Remediation Planning
5. Deployment and Regression Testing
6. Post-Remediation Monitoring and Continuous Improvement

Chapter 25: Beyond Patching, Root Cause Elimination and Architectural Resilience

1. The Limits of Patching
2. Root Cause Analysis and Elimination
3. Attack Surface Reduction
4. Architectural Security and Defense in Depth
5. Resilience When Patches Are Unavailable
6. The Patching-Plus Strategy

Chapter 26: Integrating Security into the Software Development Lifecycle

1. SDLC Integration Frameworks
2. DevSecOps Practices
3. Secure Coding Standards and Training
4. Security Testing Automation
5. Security Ownership Models

Chapter 27: Organizational, Policy and Regulatory Dimensions

1. Vulnerability Disclosure Programs
2. Coordinated Vulnerability Disclosure
3. Incident Response and Vulnerability Management
4. Regulatory and Compliance Considerations
5. Security Metrics and Governance
6. Cultural Factors

Chapter 28: Emerging Threats and Future Directions

1. AI-Powered Attacks and Defenses
2. Increased Automation in Vulnerability Exploitation
3. Quantum Computing and Cryptography
4. IoT, Edge Computing and Operational Technology
5. The Future of Vulnerability Research and Management

Conclusion

Glossary

References