Exploiting Software: How to Break Code

Addison-Wesley is pleased to announce Exploiting Software: How to Break
Code, (ISBN 0201786958) publishing Feb. 2004. 

Written by Greg Hoglund and Gary McGraw, this book answers questions such
as: How does software break? How do attackers make software break on
purpose? Why are firewalls, intrusion detection systems, and anti virus
software not keeping out the bad guys? What tools can be used to break
software? 
·	Includes attack patterns, real code, and example exploits, learn
techniques that are used by real malicious hackers against software.
·	Shows how to break code--If you want to protect your software from
attack, you must first learn how real attacks are really carried out
For a galley of this book, or for interviews with the authors, please
respond to this email.
 More information:
"It's about time someone wrote a book to teach the good guys what the bad
guys already know. As the computer security industry matures, books like
Exploiting Software have a critical role to play." --Bruce Schneier, Chief
Technology Officer, Counterpane 

Audience
The primary audience for this book is the security programmer, but there are
important lessons here for all computer professionals. This book will be of
particular interest to security practitioners working to beef up their
software security skills, including ethical hackers, network.

About the Authors
Greg Hoglund has been a pioneer in the area of software security for 10
years. He created and documented the first Windows NT based rootkit,
founding www.rootkit.com in the process. Gary McGraw, Cigital, Inc.'s CTO,
researches software security in the area of Software Quality Management. Dr.
McGraw is co-author of four popular books including, Securing Java (Wiley,
1999) and Building Secure Software (Addison-Wesley, 2002). A noted authority
on software security, Dr. McGraw consults with several major corporations.

Table of Contents: 
Chapter 1 Software--the Root of the Problem 
Chapter 2 Attack Patterns 
Chapter 3 Reverse Engineering and Program Understanding 
Chapter 4 Exploiting Server Software 
Chapter 5 Exploiting Client Software 
Chapter 6 Input and Output 
Chapter 7 Buffer Overflow 
Chapter 8 Rootkits

Thank you for your time and please contact me with any questions.

Best regards,
Joan Murray
Addison-Wesley Professional
P. 617.848.6536



++++++++++++++++++++
Joan Murray
Senior Publicist
Addison-Wesley Professional/ Prentice Hall PTR
75 Arlington Street, Ste. 300
Boston, MA  02116 
P. 617.848.6536
E. joan.murray@aw.com
www.awprofessional.com
www.phptr.com
++++++++++++++++++++


****************************************************************************
This email may contain confidential material.
If you were not an intended recipient, 
please notify the sender and delete all copies.
We may monitor email to and from our network.

****************************************************************************