97 Things Every Application Security Professional Should Know

by Reet Kaur, Yabing Wang

Overview

As technology continues to advance and more business is conducted online, the potential attack surface increases exponentially and the need for strong application security measures become more and more crucial. This goes double for any organization that handles sensitive personal or financial information which is usually subject to government regulation. The consequences of a successful attack at the application level can be devastating for an organization, ranging from loss of revenue, to damaged reputation, to potential fines and other penalties.

This book also introduces you to:

• What's considered application security and what security professionals should know
• What developers or software engineers should know about common application vulnerabilities
• How to design, develop, and test applications so that the application or software is able to defend against exploits and attacks
• Ways to provide readers with fresh perspectives, various insights, and many practical ways to address cyber security related to application development

This advice can be applied in development for web, mobile, APIs or other software development, in different development languages, in waterfall and agile software development lifecycle (SDLC), and in the cloud.

Product Details

ISBN-13:	9781098152130
Publisher:	O'Reilly Media, Incorporated
Publication date:	06/25/2024
Sold by:	Barnes & Noble
Format:	eBook
Pages:	310
File size:	37 MB
Note:	This product may take a few minutes to download.

About the Author

Reet Kaur is a highly experienced and accomplished information security professional. She currently serves as the Cabinet Executive VP and Chief Information Security Officer (CISO) at the largest higher-ed institute in Portland, Oregon, where she leads a team responsible for all aspects of the college's information security program.

Reet is a great example of how anyone can succeed in cybersecurity, regardless of their background or educational path. She earned her Bachelor's degree in Civil Engineering with a Minor in computers from Punjab University, India, Master of Sciences degree from University of Waterloo Canada and Executive CISO certificate from Carnegie Mellon University. Reet started her career in IT as an application developer which created a pathway to get into information security. She has 20+ years experience working as a leader in IT and information Security in Fortune 100 and 500 companies like Nike Inc., AECOM, Fidelity and Canadian Imperial Bank of Commence (CIBC). She is renowned as a thought leader in organizational transformation, with a unique, globally-informed risk-based approach to information security, data privacy, IT, and digital transformation. She holds CISSP, CRISC, CISM, PMP certifications and is passionate about closing the talent, gender and under-represented minorities gap in cybersecurity. She is an empathetic leader passionate about mentoring and coaching to help uplift others in their careers. She is an avid speaker at security conferences and industry panels. She is also a content developer on Linkedin and talks about a variety of topics including information security, leadership and DEI.

Yabing Wang is the VP and Chief Information Security Officer at Justworks. She has been in the technology world for 25 years and has more than 20 years of extensive leadership experience in cybersecurity across different industries. Yabing had her undergraduate degree in Philosophy and obtained her master’s degree in computer science from University of Illinois at Urbana-Champaign. Yabing began her career as an application developer and an ecommerce expert with Netscape Communications. She started her cybersecurity journey from application security in 2002, and her technical expertise has helped her grow into Chief Security Architect, VP of Security Architecture and Engineering, then CISO. Yabing has a passion for security and continues to learn and grow through the journey in cloud and DevOps. Yabing has also built global security practices and strengthened cyber resilience at Allstate Insurance Company, Alight Solutions, Carrier Corporation, and H-E-B. Yabing speaks at CISO conferences, RSA, AWS, IBM and other conferences, and is a strong advocate for women in technology and women in cybersecurity.