Building secure and reliable systems : best practices for designing, implementing, and maintaining systems / Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield.

Foreword by Royal Hansen, xix -- Foreword by Michael Wildpaner, xxiii -- Preface, xxv -- Pat 1. Introductory material -- 1. The intersection of security and reliability, 3 -- 2. Understanding adversaries, 15 -- Part II. Designing systems -- 3. Case study: safe proxies, 37 -- 4. Design tradeoffs, 43 -- 5. Design for least privilege, 61 -- 6. Design for understandability, 89 -- 7. Design for a changing landscape, 121 -- 8. Design for resilience, 143 -- 9. Design for recovery, 183 -- 10. Mitigating denial-of-service attacks, 217 -- Part III. Implementing systems -- II. Case study: designing, implementing, and maintaining, a publicly trusted CA., 233 -- 12. Writing code, 243 -- 13. Testing code, 271 -- 14. Deploying code, 303 -- 15. Investigating systems, 333 -- Part IV. Maintaining Systems -- 16. Disaster planning, 363 -- 17. Crisis management, 387 -- Recovery and aftermath, 417 -- Part V. Organization and Culture -- 19. Case Study: Chrome Security Team, 445 -- 20. Understanding roles and responsibilities, 455 -- 21. Building a culture of security and reliability, 471 -- Conclusion, 497 -- Conclusion, 497 -- Appendix. A disaster risk assessment matrix, 499 -- Index, 501.