24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
Michael Howardis is a principal security program manager on the Trustworthy Computing Group’s Security Engineering team at Microsoft. He is the author or coauthor of many well-known software security books and is an editor ofIEEE Security & Privacy.David LeBlanc, Ph.D.,is a principal software development engineer on the Microsoft Office security team. He is a coauthor, with Michael Howard, ofWriting Secure Code(Microsoft Press).John Viegais CTO of the SaaS Business Unit at McAfee and was previously their chief security architect. He is the author of five other security books. Mr. Viega first defined the 19 deadly sins of software security for the Department of Homeland Security.