Holistic InfoSec For Web Developers, Fascicle 0: Physical and People
This book is 95% complete
Last updated on 2017-03-08
About the Book
Fascicle 0 focusses on:
- The chosen threat modelling approach
- Setting up your tool-belt
- The process of penetration testing
- A collection of processes and practises formulated from penetration testing, useful for augmenting each and every Scrum Sprint
Fascicle 0 is now considered Done.
Hard copies can be purchased at Amazon
This book begins by taking the reader to the 30,000’ view, so you can start to see the entire security landscape. I then attempt to explain a very simple threat modelling approach that I believe Bruce Schneier created, called the Sensible Security Model (SSM). We take the learnings from the first chapter and apply them to lower levels. I detail how to set-up a security focussed distribution with all the tools and configuration options required for working through the book. We then walk through the Process and Practises that the attackers often execute, and we take the learnings from that and train the defenders on how they can bring the finding of defects from the most expensive place to the cheapest place, within your Sprint cycles. The rest of the book focusses on the specific areas addressed on the cover of this book.
My intention with “Holistic Info-Sec for Web Developers” is in many ways to help you answer your own questions and show you that creating systems and arming people to withstand the types of attacks commonly encounted today is not out of reach of mere mortals. That by simply lifting the lower hanging fruit for an attacker often means they will move on to an easier target. Unless they are specifically targeting you. In which case you should find many of the risks and countermeasures I address, effective for increasing the difficulty for your attacker, and thus dramatically increasing your chances of defence and counter-attack.
Some contributions to the People chapter. Especially around phishing countermeasures. Chris is the creator of Pond
Some contributions to the Physical chapter
The Leanpub Unconditional, No Risk, 100% Happiness Guarantee
Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
See full terms