Writing Secure Code for Windows Vista

Description

Get the definitive guide to writing more-secure code for Windows Vista - from the authors of the award-winning Writing Secure Code, Michael Howard and David LeBlanc. This reference is ideal for developers who understand the fundamentals of Windows programming and APIs. It complements Writing Secure Code, examining the delta between Windows XP and Windows Vista security. You get first-hand insights into design decisions, lessons learned from Windows Vista development, and practical advice for solving real-world security issues.

Discover how to:

* Develop applications to run without administrator privileges
* Apply best practices for using integrity controls
* Help protect your applications with ASLR, NX, and SafeSEH
* Evaluate authentication, authorization, and cryptography enhancements in Windows Vista
* Write services that restrict privileges and tokens - and sidestep common problems
* Learn how Windows Internet Explorer 7 defenses and new security features affect your development efforts

PLUS - Get Microsoft Visual C#, Visual C++, and C code samples on the Web

CONTENTS:

ForewordAcknowledgmentsIntroductionChapter 1: Code QualityChapter 2: User Account Control, Tokens, and Integrity LevelsChapter 3: Buffer Overrun DefensesChapter 4: Networking DefensesChapter 5: Creating Secure and Resilient ServicesChapter 6: Internet Explorer 7 DefensesChapter 7: Cryptographic EnhancementsChapter 8: Authentication and AuthorizationChapter 9: Miscellaneous Defenses and Security-Related Technologies