{"product_id":"software-security-for-developers-with-examples-in-java-and-spring","title":"Software Security for Developers: With Examples in Java and Spring","description":"\u003cp\u003e\u003cb\u003eGet the eBook free when you register your print book at Manning.\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003eSoftware security is about understanding how real systems fail, and how to build them so they don't. This book gives you that understanding, and shows you how to apply it in the modern cloud and Kubernetes environments you work with every day.\u003c\/p\u003e\n\u003cp\u003eThe book starts with the reality developers face: security problems are not theoretical--they show up in design choices, dependencies, configuration, and day-to-day coding decisions. You'll see why breaches happen, how supply chain risks creep in, and how \"secure development\" actually looks across the lifecycle--from design to deployment.\u003c\/p\u003e\n\u003cp\u003eFrom there, the book builds the foundation you need to work confidently with security tools. Instead of treating frameworks as black boxes, it explains the standards, protocols, and patterns they implement.\u003c\/p\u003e\n\u003cp\u003eYou'll learn how integrity, encryption, authentication, and identity really work--so TLS, OAuth2, OpenID Connect, and certificates become understandable and usable.\u003c\/p\u003e\n\u003cp\u003eWith that foundation in place, the focus shifts to modern application architecture. You'll implement secure communication channels, design authentication and identity flows, adopt passwordless approaches, and manage authorization across complex service-to-service call chains. Along the way, you'll see how to give every service an identity, enforce access policies, and secure interactions in distributed, cloud-native systems.\u003c\/p\u003e\n\u003cp\u003eThroughout the book, concepts are grounded in practical Java examples that mirror real production scenarios. By the end, you'll be familiar with security terms and know how to apply them to build systems that pass audits, resist attacks, and hold up under real-world pressure.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eWhat's inside\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003e- Why security failures happen in real systems\u003c\/p\u003e\n\u003cp\u003e- How to apply cryptography and security standards correctly\u003c\/p\u003e\n\u003cp\u003e- How to secure identity, access, and service communication\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eAbout the reader\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003eFor developers who want to understand and apply security with confidence.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eAbout the author\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eAdib Saikali\u003c\/b\u003e is a Distinguished Software Engineer and a Principal Solutions Engineer at VMware Tanzu. \u003cb\u003eLaurentiu Spilca\u003c\/b\u003e is Java and Spring expert, an experienced technology instructor, and the author of several books.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eTable of Contents\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003ePart 1\u003c\/p\u003e\n\u003cp\u003e1 Making sense of application security\u003c\/p\u003e\n\u003cp\u003e2 Standards for implementing authentication\u003c\/p\u003e\n\u003cp\u003e3 Service-to-service communication\u003c\/p\u003e\n\u003cp\u003ePart 2\u003c\/p\u003e\n\u003cp\u003e4 Message integrity and authentication\u003c\/p\u003e\n\u003cp\u003e5 Advanced Encryption Standard\u003c\/p\u003e\n\u003cp\u003e6 Public key encryption and digital signatures: Unleashing RSA\u003c\/p\u003e\n\u003cp\u003e7 Public key encryption and digital signatures: Using ECC\u003c\/p\u003e\n\u003cp\u003ePart 3\u003c\/p\u003e\n\u003cp\u003e8 Public key infrastructure and X.509 digital certificates: Know who you're talking to\u003c\/p\u003e\n\u003cp\u003e9 Working with X.509 certificates: Life cycle and self-signing\u003c\/p\u003e\n\u003cp\u003e10 Transport Layer Security: How the internet is secured\u003c\/p\u003e\n\u003cp\u003ePart 4\u003c\/p\u003e\n\u003cp\u003e11 JSON Object Signing and Encryption\u003c\/p\u003e\n\u003cp\u003e12 Single-sign on using OAuth2 and OpenID Connect\u003c\/p\u003e\n\u003cp\u003e13 Deepening security with OpenID Connect\u003c\/p\u003e\n\u003cp\u003e14 Passwordless login: Using magic links and one-time passwords\u003c\/p\u003e\n\u003cp\u003e15 Passwordless login: WebAuthn and hardware authentication\u003c\/p\u003e\n\u003cp\u003ePart 5\u003c\/p\u003e\n\u003cp\u003e16 Implementing service identity\u003c\/p\u003e\n\u003cp\u003e17 Taming authorization: RBAC, ABAC, and ReBAC\u003c\/p\u003e\n\u003cp\u003eAppendix\u003c\/p\u003e\n\u003cp\u003eA Installation and setup\u003c\/p\u003e","brand":"Adib Saikali","offers":[{"title":"Default Title","offer_id":46060184797253,"sku":"BS-LIB-298585","price":71.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2482\/2494\/files\/9781617298585-HD.jpg?v=1792418789","url":"https:\/\/libros787.com\/products\/software-security-for-developers-with-examples-in-java-and-spring","provider":"Libros787.com","version":"1.0","type":"link"}