Books<\/p>\n[\/vc_column_text][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
\nApplication Security Learning Resources<\/h2>\n<\/blockquote>\n[\/vc_column_text][nectar_single_testimonial testimonial_style=”basic” quote=”Here is a collection of links specifically for anyone interested in learning more about application security. Comprises reading materials, online resources, blog entries, and tests of individual competence.”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
General<\/h3>\n[\/heading][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]How to Safely Generate a Random Number\u00a0<\/a> – Released: February 25, 2014 : Advice on cryptographically secure pseudo-random number generators.<\/p>\n
Salted Password Hashing – Doing it Right (2014)<\/a> – Released: August 6, 2014 : A post on Crackstation, a project by Defuse Security<\/p>\n
A good idea with bad usage: \/dev\/urandom<\/a>\u00a0(2014) – Released: May 3, 2014 : Mentions many ways to make\u00a0\/dev\/urandom\u00a0fail on Linux\/BSD.<\/p>\n
Why Invest in Application Security?<\/a>\u00a0(2015) – Released: June 21, 2015\u00a0 : Running a business requires being cost-conscious and minimizing unnecessary spending. The benefits of ensuring in the security of your application are invisible to most companies, so often times they neglect to invest in secure software development as a cost-saving measure. What these companies don’t realize is the potential cost (both financial and to brand reputation) a preventable data compromise can incur. The average data breach costs millions of dollars in damage. Investing more time and personnel to develop secure software is, for most companies, worth it to minimize this unnecessary risk to their bottom line.<\/p>\n
Be wary of one-time pads and other crypto unicorns<\/a>\u00a0(2015) – Released: March 25, 2015 : A\u00a0must-read\u00a0for anyone looking to build their own cryptography features.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books<\/h4>\n[\/vc_column_text][vc_column_text]Web Application Hacker’s Handbook<\/a>\u00a0(2011) – Released: September 27, 2011 : Great introduction to Web Application Security; though slightly dated.<\/p>\n
Cryptography Engineering<\/a>\u00a0(2010) – Released: March 15, 2010 : Develops a sense of professional paranoia while presenting crypto design techniques.<\/p>\n
Securing DevOps<\/a>\u00a0(2018) – Released: March 1, 2018 : Securing DevOps explores how the techniques of DevOps and Security should be applied together to make cloud services safer. This introductory book reviews state of the art practices used in securing web applications and their infrastructure, and teaches you techniques to integrate security directly into your product.<\/p>\n
Gray Hat Python: Programming for Hackers and Reverse Engineers<\/a>\u00a0(2009) – Released: May 3, 2009<\/p>\n
The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities<\/a>\u00a0(2006) – Released: November 30, 2006<\/p>\n
C Interfaces and Implementations: Techniques for Creating Reusable Software<\/a>\u00a0(1996) – Released: August 30, 1996<\/p>\n
Reversing: Secrets of Reverse Engineering<\/a>\u00a0(2005)\u00a0 – Released: April 15, 2005<\/p>\n
JavaScript: The Good parts<\/a>\u00a0(2008) – Released: May 1, 2008<\/p>\n
Windows Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition\u00a0<\/a>(2007) – Released: June 17, 2007<\/p>\n
The Mac Hacker’s Handbook<\/a>\u00a0(2009) – Released: March 3, 2009<\/p>\n
The IDA Pro Book: The Unofficial Guide to the World’s Most Popular Disassembler<\/a>\u00a0(2008) – Released: August 22, 2008<\/p>\n
Internetworking with TCP\/IP Vol. II: ANSI C Version: Design, Implementation, and Internals (3rd Edition)<\/a>\u00a0(1998) – Released: June 25, 1998<\/p>\n
Network Algorithmics,: An Interdisciplinary Approach to Designing Fast Networked Devices<\/a>\u00a0(2004)\u00a0 – Released: December 29, 2004<\/p>\n
Computation Structures (MIT Electrical Engineering and Computer Science)<\/a>\u00a0(1989) – Released: December 13, 1989<\/p>\n
Surreptitious Software: Obfuscation, Watermarking, and Tamperproofing for Software Protection<\/a>\u00a0(2009) – Released: August 3, 2009<\/p>\n
Secure Programming HOWTO<\/a>\u00a0(2015) – Released: March 1, 2015<\/p>\n
Security Engineering – Second Edition<\/a>\u00a0(2008) – Released: April 14, 2008<\/p>\n
Bulletproof SSL and TLS<\/a>\u00a0(2014) – Released: August 1, 2014<\/p>\n
Holistic Info-Sec for Web Developers (Fascicle 0)<\/a>\u00a0(2016) – Released: September 17, 2016 : The first part of a three part book series providing broad and in-depth coverage on what web developers and architects need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises.<\/p>\n
Holistic Info-Sec for Web Developers (Fascicle 1)<\/a> – The second part of a three part book series providing broad and in-depth coverage on what web developers and architects need to know in order to create robust, reliable, maintainable and secure software, VPS, networks, cloud and web applications, that are delivered continuously, on time, with no nasty surprises.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Classes<\/h4>\n[\/vc_column_text][vc_column_text]Offensive Computer Security (CIS 4930) FSU<\/a> – A vulnerability research and exploit development class by Owen Redwood of Florida State University.<\/p>\n
Hack Night<\/a> – Developed from the materials of NYU Poly’s old Penetration Testing and Vulnerability Analysis course, Hack Night is a sobering introduction to offensive security. A lot of complex technical content is covered very quickly as students are introduced to a wide variety of complex and immersive topics over thirteen weeks.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Websites<\/h4>\n[\/vc_column_text][vc_column_text]Hack This Site!<\/a> – Learn about application security by attempting to hack this website.<\/p>\n
Enigma Group<\/a> – Where hackers and security experts come to train.<\/p>\n
Web App Sec Quiz<\/a> – Self-assessment quiz for web application security<\/p>\n
SecurePasswords.info<\/a> – Secure passwords in several languages\/frameworks.<\/p>\n
Security News Feeds Cheat-Sheet<\/a> – A list of security news sources.<\/p>\n
Open Security Training<\/a> – Video courses on low-level x86 programming, hacking, and forensics.<\/p>\n
MicroCorruption<\/a> – Capture The Flag – Learn Assembly and Embedded Device Security<\/p>\n
The Matasano Crypto Challenges<\/a> – A series of programming exercises for teaching oneself\u00a0cryptography by\u00a0Matasano Security<\/a>.\u00a0The introduction<\/a>\u00a0by Maciej Ceglowski explains it well.<\/p>\n
PentesterLab<\/a> – PentesterLab provides\u00a0free Hands-On exercises<\/a>\u00a0and a\u00a0bootcamp<\/a>\u00a0to get started.<\/p>\n
Juice Shop<\/a>\u00a0 – An intentionally insecure Javascript Web Application.<\/p>\n
Supercar Showdown<\/a> – How to go on the offence before online attackers do.<\/p>\n
OWASP NodeGoat<\/a> – Purposly vulnerable to the OWASP Top 10 Node.JS web application, with\u00a0tutorials<\/a>,\u00a0security regression testing with the OWASP Zap API<\/a>,\u00a0docker image<\/a>. With several options to get up and running fast.<\/p>\n
Securing The Stack<\/a> – Bi-Weekly Appsec Tutorials<\/p>\n
OWASP ServerlessGoat<\/a> – OWASP ServerlessGoat is a deliberately insecure realistic AWS Lambda serverless application, maintained by OWASP and created by\u00a0PureSec<\/a>. You can install WebGoat, learn about the vulnerabilities, how to exploit them, and how to remediate each issue. The project also includes documentation explaining the issues and how they should be remediated with best-practices.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Blogs<\/h4>\n[\/vc_column_text][vc_column_text]\n
Crypto Fails<\/a> – Showcasing bad cryptography<\/p>\n
NCC Group – Blog<\/a> – The blog of NCC Group, formerly Matasano, iSEC Partners, and NGS Secure.<\/p>\n
Scott Helme<\/a> – Learn about security and performance.<\/p>\n
Cossack Labs blog<\/a>\u00a0(2018) – Blog of cryptographic company that makes open-source libraries and tools, and describes practical data security approaches for applications and infrastructures.<\/p>\n
OWASP Top Ten Project<\/a> – The top ten most common and critical security vulnerabilities found in web applications.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Tools<\/h4>\n[\/vc_column_text][vc_column_text]\n
Qualys SSL Labs<\/a> – The infamous suite of SSL and TLS tools.<\/p>\n
securityheaders.io<\/a> – Quickly and easily assess the security of your HTTP response headers.<\/p>\n
report-uri.io<\/a> – A free CSP and HPKP reporting service.<\/p>\n
clickjacker.io<\/a> – Test and learn Clickjacking. Make clickjacking PoC, take screenshot and share link. You can test HTTPS, HTTP, intranet & internal sites.<\/p>\n
AWS Lambda<\/p>\n
PureSec FunctionShield<\/a> – FunctionShield is a 100% free AWS Lambda security and Google Cloud Functions security library that equips developers with the ability to easily enforce strict security controls on serverless runtimes.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
Android<\/strong><\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
SEI CERT Android Secure Coding Standard<\/a>\u00a0(2015) – Released: February 24, 2015<\/p>\n
A community-maintained Wiki detailing secure coding standards for Android development.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
C<\/h2>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
SEI CERT C Coding Standard<\/a>\u00a0(2006) – Released: May 24, 2006<\/p>\n
A community-maintained Wiki detailing secure coding standards for C programming.<\/p>\n
Defensive Coding: A Guide to Improving Software Security by the Fedora Security Team<\/a>\u00a0(2022) – Released: May 23, 2022 : Provides guidelines for improving software security through secure coding. Covers common programming languages and libraries, and focuses on concrete recommendations.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
C++<\/h2>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
SEI CERT C++ Coding Standard<\/a>\u00a0(2006) – Released: July 18, 2006 – A community-maintained Wiki detailing secure coding standards for C++ programming.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
C Sharp<\/p>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
Security Driven .NET<\/span><\/a>\u00a0(2015) – Released: July 14, 2015 : An introduction to developing secure applications targeting version 4.5 of the .NET Framework, specifically covering cryptography and security engineering topics.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
Clojure<\/p>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Repositories<\/h4>\n[\/vc_column_text][vc_column_text]\n
Clojure OWASP<\/span><\/a>\u00a0<\/span>(2020) – Released: May 5, 2020 Repository with Clojure examples of OWASP top 10 vulnerabilities.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
Go<\/p>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]\n
Memory Security in Go – spacetime.dev<\/span><\/a>\u00a0<\/span>(2017) – Released: August 3, 2017 : A guide to managing sensitive data in memory.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
Java<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
SEI CERT Java Coding Standard<\/a>\u00a0(2007) – Released: January 12, 2007 : A community-maintained Wiki detailing secure coding standards for Java programming.<\/p>\n
Secure Coding Guidelines for Java SE<\/a>\u00a0(2014) – Released: April 2, 2014 : Secure Java programming guidelines straight from Oracle.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
Node.js<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]\n
Node.js Security Checklist – Rising Stack Blog<\/a>\u00a0(2015) – Released: October 13, 2015 : Covers a lot of useful information for developing secure Node.js applications.<\/p>\n
Awesome Electron.js hacking & pentesting resources<\/span><\/a>\u00a0(2020) – Released: June 17, 2020 : A curated list of resources to secure Electron.js-based applications.<\/span><\/p>\n
Essential Node.js Security<\/span><\/a>\u00a0(2017) – Released: July 19, 2017 : Hands-on and abundant with source code for a practical guide to Securing Node.js web applications.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
PHP<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]It’s All About Time<\/a>\u00a0(2014) – Released: November 28, 2014 : A gentle introduction to timing attacks in PHP applications<\/p>\n
<\/p>\n
Secure Authentication in PHP with Long-Term Persistence<\/a>\u00a0(2015) – Released: April 21, 2015 : Discusses password policies, password storage, “remember me” cookies, and account recovery.<\/p>\n
<\/p>\n
20 Point List For Preventing Cross-Site Scripting In PHP<\/a>\u00a0(2013) – Released: April 22, 2013 : Padriac Brady’s advice on building software that isn’t vulnerable to XSS<\/p>\n
<\/p>\n
25 PHP Security Best Practices For Sys Admins<\/a>\u00a0(2011) – Released: November 23, 2011 : Though this article is a few years old, much of its advice is still relevant as we veer around the corner towards PHP 7.<\/p>\n
<\/p>\n
PHP data encryption primer<\/a>\u00a0(2014) – Released: June 16, 2014 : @timoh6 explains implementing data encryption in PHP<\/p>\n
<\/p>\n
Preventing SQL Injection in PHP Applications – the Easy and Definitive Guide<\/a>\u00a0(2014) – Released: May 26, 2014 TLDR\u00a0– don’t escape, use prepared statements instead!<\/p>\n
<\/p>\n
You Wouldn’t Base64 a Password – Cryptography Decoded<\/a>\u00a0(2015) – Released: August 7, 2015 : A human-readable overview of commonly misused cryptography terms and fundamental concepts, with example code in PHP.<\/p>\n
<\/p>\n
If you’re confused about cryptography terms, start here. – A Guide to Secure Data Encryption in PHP Applications<\/a>\u00a0(2015)\u00a0 – Released: August 2, 2015 : Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use\u00a0libsodium<\/a>,\u00a0Defuse Security’s secure PHP encryption library<\/a>, or OpenSSL.<\/p>\n
<\/p>\n
The 2018 Guide to Building Secure PHP Software<\/a>\u00a0(2017) – Released: December 12, 2017 : This guide should serve as a complement to the e-book,\u00a0PHP: The Right Way<\/a>, with a strong emphasis on security and not general PHP programmer topics (e.g. code style).[\/vc_column_text][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
Securing PHP: Core Concepts<\/span><\/a> – <\/span>Securing PHP: Core Concepts<\/span>\u00a0<\/span>acts as a guide to some of the most common security terms and provides some examples of them in every day PHP.<\/span><\/p>\n
Using Libsodium in PHP Projects<\/span><\/a> – <\/span>You shouldn’t need a Ph.D in Applied Cryptography to build a secure web application. Enter libsodium, which allows developers to develop fast, secure, and reliable applications without needing to know what a stream cipher even is.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
PHP<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]It’s All About Time<\/a>\u00a0(2014) – Released: November 28, 2014 : A gentle introduction to timing attacks in PHP applications<\/p>\n
<\/p>\n
Secure Authentication in PHP with Long-Term Persistence<\/a>\u00a0(2015) – Released: April 21, 2015 : Discusses password policies, password storage, “remember me” cookies, and account recovery.<\/p>\n
<\/p>\n
20 Point List For Preventing Cross-Site Scripting In PHP<\/a>\u00a0(2013) – Released: April 22, 2013 : Padriac Brady’s advice on building software that isn’t vulnerable to XSS<\/p>\n
<\/p>\n
25 PHP Security Best Practices For Sys Admins<\/a>\u00a0(2011) – Released: November 23, 2011 : Though this article is a few years old, much of its advice is still relevant as we veer around the corner towards PHP 7.<\/p>\n
<\/p>\n
PHP data encryption primer<\/a>\u00a0(2014) – Released: June 16, 2014 : @timoh6 explains implementing data encryption in PHP<\/p>\n
<\/p>\n
Preventing SQL Injection in PHP Applications – the Easy and Definitive Guide<\/a>\u00a0(2014) – Released: May 26, 2014 TLDR\u00a0– don’t escape, use prepared statements instead!<\/p>\n
<\/p>\n
You Wouldn’t Base64 a Password – Cryptography Decoded<\/a>\u00a0(2015) – Released: August 7, 2015 : A human-readable overview of commonly misused cryptography terms and fundamental concepts, with example code in PHP.<\/p>\n
<\/p>\n
If you’re confused about cryptography terms, start here. – A Guide to Secure Data Encryption in PHP Applications<\/a>\u00a0(2015)\u00a0 – Released: August 2, 2015 : Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use\u00a0libsodium<\/a>,\u00a0Defuse Security’s secure PHP encryption library<\/a>, or OpenSSL.<\/p>\n
<\/p>\n
The 2018 Guide to Building Secure PHP Software<\/a>\u00a0(2017) – Released: December 12, 2017 : This guide should serve as a complement to the e-book,\u00a0PHP: The Right Way<\/a>, with a strong emphasis on security and not general PHP programmer topics (e.g. code style).[\/vc_column_text][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
Securing PHP: Core Concepts<\/span><\/a> – <\/span>Securing PHP: Core Concepts<\/span>\u00a0<\/span>acts as a guide to some of the most common security terms and provides some examples of them in every day PHP.<\/span><\/p>\n
Using Libsodium in PHP Projects<\/span><\/a> – <\/span>You shouldn’t need a Ph.D in Applied Cryptography to build a secure web application. Enter libsodium, which allows developers to develop fast, secure, and reliable applications without needing to know what a stream cipher even is.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
PHP<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]It’s All About Time<\/a>\u00a0(2014) – Released: November 28, 2014 : A gentle introduction to timing attacks in PHP applications<\/p>\n
<\/p>\n
Secure Authentication in PHP with Long-Term Persistence<\/a>\u00a0(2015) – Released: April 21, 2015 : Discusses password policies, password storage, “remember me” cookies, and account recovery.<\/p>\n
<\/p>\n
20 Point List For Preventing Cross-Site Scripting In PHP<\/a>\u00a0(2013) – Released: April 22, 2013 : Padriac Brady’s advice on building software that isn’t vulnerable to XSS<\/p>\n
<\/p>\n
25 PHP Security Best Practices For Sys Admins<\/a>\u00a0(2011) – Released: November 23, 2011 : Though this article is a few years old, much of its advice is still relevant as we veer around the corner towards PHP 7.<\/p>\n
<\/p>\n
PHP data encryption primer<\/a>\u00a0(2014) – Released: June 16, 2014 : @timoh6 explains implementing data encryption in PHP<\/p>\n
<\/p>\n
Preventing SQL Injection in PHP Applications – the Easy and Definitive Guide<\/a>\u00a0(2014) – Released: May 26, 2014 TLDR\u00a0– don’t escape, use prepared statements instead!<\/p>\n
<\/p>\n
You Wouldn’t Base64 a Password – Cryptography Decoded<\/a>\u00a0(2015) – Released: August 7, 2015 : A human-readable overview of commonly misused cryptography terms and fundamental concepts, with example code in PHP.<\/p>\n
<\/p>\n
If you’re confused about cryptography terms, start here. – A Guide to Secure Data Encryption in PHP Applications<\/a>\u00a0(2015)\u00a0 – Released: August 2, 2015 : Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use\u00a0libsodium<\/a>,\u00a0Defuse Security’s secure PHP encryption library<\/a>, or OpenSSL.<\/p>\n
<\/p>\n
The 2018 Guide to Building Secure PHP Software<\/a>\u00a0(2017) – Released: December 12, 2017 : This guide should serve as a complement to the e-book,\u00a0PHP: The Right Way<\/a>, with a strong emphasis on security and not general PHP programmer topics (e.g. code style).[\/vc_column_text][vc_column_text]\n
Books and ebooks<\/h4>\n[\/vc_column_text][vc_column_text]\n
Securing PHP: Core Concepts<\/span><\/a> – <\/span>Securing PHP: Core Concepts<\/span>\u00a0<\/span>acts as a guide to some of the most common security terms and provides some examples of them in every day PHP.<\/span><\/p>\n
Using Libsodium in PHP Projects<\/span><\/a> – <\/span>You shouldn’t need a Ph.D in Applied Cryptography to build a secure web application. Enter libsodium, which allows developers to develop fast, secure, and reliable applications without needing to know what a stream cipher even is.<\/span><\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” id=”Tools” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][heading]\n
PHP<\/h3>\n[\/heading][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
Articles<\/h4>\n[\/vc_column_text][vc_column_text]It’s All About Time<\/a>\u00a0(2014) – Released: November 28, 2014 : A gentle introduction to timing attacks in PHP applications<\/p>\n
<\/p>\n
Secure Authentication in PHP with Long-Term Persistence<\/a>\u00a0(2015) – Released: April 21, 2015 : Discusses password policies, password storage, “remember me” cookies, and account recovery.<\/p>\n
<\/p>\n
20 Point List For Preventing Cross-Site Scripting In PHP<\/a>\u00a0(2013) – Released: April 22, 2013 : Padriac Brady’s advice on building software that isn’t vulnerable to XSS<\/p>\n
<\/p>\n
25 PHP Security Best Practices For Sys Admins<\/a>\u00a0(2011) – Released: November 23, 2011 : Though this article is a few years old, much of its advice is still relevant as we veer around the corner towards PHP 7.<\/p>\n
<\/p>\n
PHP data encryption primer<\/a>\u00a0(2014) – Released: June 16, 2014 : @timoh6 explains implementing data encryption in PHP<\/p>\n
<\/p>\n
Preventing SQL Injection in PHP Applications – the Easy and Definitive Guide<\/a>\u00a0(2014) – Released: May 26, 2014 TLDR\u00a0– don’t escape, use prepared statements instead!<\/p>\n
<\/p>\n
You Wouldn’t Base64 a Password – Cryptography Decoded<\/a>\u00a0(2015) – Released: August 7, 2015 : A human-readable overview of commonly misused cryptography terms and fundamental concepts, with example code in PHP.<\/p>\n
<\/p>\n
If you’re confused about cryptography terms, start here. – A Guide to Secure Data Encryption in PHP Applications<\/a>\u00a0(2015)\u00a0 – Released: August 2, 2015 : Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use\u00a0libsodium<\/a>,\u00a0Defuse Security’s secure PHP encryption library<\/a>, or OpenSSL.<\/p>\n
<\/p>\n