Software Security for Developers: With examples in Java and Spring

This book breaks down the fundamentals of securing cloud-based applications in a way that’s both practical and easy to understand. You’ll learn the concepts and practices you’ll need to keep your cloud applications and data safe during development and after deployment. Security can be hard to understand, and fixing problems is not always easy. Without a clear understanding of the basics, it is difficult to build secure systems. This book explains key security ideas in simple terms and shows how to use them in everyday development. It brings together the main security concepts in one practical guide. Configure industry-standard security protocols correctly. Quickly debug errors and exceptions from security libraries. Use the developer-friendly Google Tink cryptography library. Work with X.509 digital certificates to implement application security. Set up passwordless logins using the Web Authentication protocol. Implement single sign-on using the OpenID Connect protocol. Software Security for Developers shows you how to keep your applications secure and your company’s data safe. The book uses simple cloud app examples to explain important security ideas. You will discover how to use cryptographic algorithms correctly and reduce the need for constant passwords. After reading this book, you will know everything you need to secure your applications. You will be able to rapidly debug security-related issues and put an end to unreliable fixes. This book is for intermediate Java developers who are ready to improve their security skills.