Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Security folks often encourage people to build security in from the start, and architect systems that are secure by design. What are some readings you would recommend for someone who wants to learn more about how to go about doing this? I'm particularly interested in reading about secure-by-design languages and APIs, and how to go about designing languages/APIs for security.

share|improve this question

1 Answer 1

up vote 5 down vote accepted

These aren't books, but you may find the info useful:

Security Maturity Models tend to provide a lot of info on building security in from the start, defining Secure Development Lifecycles and managing governance and change in order to raise security baselines.

They don't go into any depth on languages or api's though, more around what you would want to look for or measure or control, so this answer may not work for you. Have a read of them both anyway and see.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.