With Vista, Microsoft provides many new options and resources for developers aiming to build more secure software. Writing Secure Code for Windows Vista gives you the expert guidance you need to use them.
Michael Howard and David LeBlanc authored the superb, complementary Writing Secure Code, Second Edition. Here, they show how to put that book's best practices and principles to work in the Vista environment. They begin by demonstrating how to leverage Vista's significant changes in user access control and privileges, and use its improved resistance to buffer overruns. Next, they review the security implications of Vista's major enhancements in networking, from IPv6 support to Vista's more fully featured firewall. You'll find a full chapter on creating more secure services (including some crucial "lessons from the school of hard knocks"); coverage of IE7 defenses and cryptographic improvements; authentication utilizing Windows CardSpace; even guidance on adding parental controls. Bill Camarda, from the July 2007 Read Only