A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security |
|
|---|---|
| Authors: | Klein, Tobias |
| Publisher: | No Starch Press |
| BISAC/Subject: | COM051240, COM053000, COM051230 |
| ISBN: | 9781593274153, Related ISBNs: 1593274157, 9781593274153 |
| Classification: | Non-Fiction |
| Number of pages: | 200, |
| Audience: | General/trade |
Synopsis: Seemingly simple bugs can have drastic consequences, allowing attackers to compromise systems, escalate local privileges, and otherwise wreak havoc on a system.
A Bug Hunter's Diary follows security expert Tobias Klein as he tracks down and exploits bugs in some of the world's most popular software, like Apple's iOS, the VLC media player, web browsers, and even the Mac OS X kernel. In this one-of-a-kind account, you'll see how the developers responsible for these flaws patched the bugs—or failed to respond at all. As you follow Klein on his journey, you'll gain deep technical knowledge and insight into how hackers approach difficult problems and experience the true joys (and frustrations) of bug hunting.
Along the way you'll learn how to:
–Use field-tested techniques to find bugs, like identifying and tracing user input data and reverse engineering
–Exploit vulnerabilities like NULL pointer dereferences, buffer overflows, and type conversion flaws
–Develop proof of concept code that verifies the security flaw
–Report bugs to vendors or third party brokers
A Bug Hunter's Diary is packed with real-world examples of vulnerable code and the custom programs used to find and test bugs. Whether you're hunting bugs for fun, for profit, or to make the world a safer place, you'll learn valuable new skills by looking over the shoulder of a professional bug hunter in action.
A Bug Hunter's Diary follows security expert Tobias Klein as he tracks down and exploits bugs in some of the world's most popular software, like Apple's iOS, the VLC media player, web browsers, and even the Mac OS X kernel. In this one-of-a-kind account, you'll see how the developers responsible for these flaws patched the bugs—or failed to respond at all. As you follow Klein on his journey, you'll gain deep technical knowledge and insight into how hackers approach difficult problems and experience the true joys (and frustrations) of bug hunting.
Along the way you'll learn how to:
–Use field-tested techniques to find bugs, like identifying and tracing user input data and reverse engineering
–Exploit vulnerabilities like NULL pointer dereferences, buffer overflows, and type conversion flaws
–Develop proof of concept code that verifies the security flaw
–Report bugs to vendors or third party brokers
A Bug Hunter's Diary is packed with real-world examples of vulnerable code and the custom programs used to find and test bugs. Whether you're hunting bugs for fun, for profit, or to make the world a safer place, you'll learn valuable new skills by looking over the shoulder of a professional bug hunter in action.
LightSail includes up to 6,000 high interest, LexileⓇ aligned book titles with every student subscription. Other titles are available for individual purchase.
SUPPORT GROWING READERS
Immediately Engage Students
Simple intuitive design has classrooms reading within minutes.
Exponentially Grow Reading Time
Students love the LightSail experience and naturally spend more time reading.
Accelerate Literacy Development
Students reading 25 minutes a day on LightSail are seeing 2+ years of Lexile growth in a single year.
LightSail Education is a comprehensive LexileⓇ and standards-aligned, literacy platform and digital e-book library. Including multimodal learning functionality and featuring books from leading publishers, LightSail holistically assesses and nurtures each student on their reading and writing-to-learn journey, throughout elementary, middle, and high school.
*LightSail offers a 2,000 or a 6,000 title bundle with its student subscriptions. Other titles are available for individual purchase.
