Long F.et al. Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs

Addison-Wesley, 2013 2014. — 304 p. — ISBN: 9780321933157This book highlights the fact that security is not a feature; it is an attitude toward taking due care at every point. It should be a continuous part of every software engineer’s design thought process. It is organized around a list of guide- lines. The meat of the book is the subtlety behind them. For example, Store passwords using a hash function appears to be a very basic and obvious point, and yet there are regular news articles about major data breaches just because some software engineer wasn’t thinking. Getting it right is tricky: there are a lot of details for the devil to hide in. This book is full of excellent guidance for dealing with those details.