4 ms·
Ask HN: Is there a good security primer for a non-security programmer?
^
Basically, I didn't take any security-adjacent classes in school, and never had to consider these things for my previous work. I've heard about things like web cache poisoning but never thought closely about them. Is there a good place for me to get a primer?
- ericalexander0 5y agohttps://securecodingdojo.owasp.org/public/index.html https://securecodingdojo.owasp.org/public/index.html
- joshcanhelp 5y agoI’ve scanned this and have it in my reading list: https://github.com/veeral-patel/how-to-secure-anything https://github.com/veeral-patel/how-to-secure-anything I’ve been working with a very competent security team for several years and there were a lot of familiar terms and techniques.
- giantg2 5y agoNIST has a bunch of resources. Just search "NIST intro to security".
- greenie_beans 5y agogood course for web developers: https://www.pluralsight.com/courses/hack-yourself-first https://www.pluralsight.com/courses/hack-yourself-first
- mooreds 5y agoIf you're into dead tree formats, I suggest this book: https://www.cl.cam.ac.uk/~rja14/book.html https://www.cl.cam.ac.uk/~rja14/book.html It's big but covers a lot of things and is pretty accessible.
- gabrielsroka 5y agohttps://web.stanford.edu/class/cs253/ https://web.stanford.edu/class/cs253/ by @feross
- absove 5y agoThanks this looks interesting, there is a youtube playlist with recordings of the lecture too https://www.youtube.com/playlist?list=PL1y1iaEtjSYiiSGVlL1cHsXN_kvJOOhu- https://www.youtube.com/playlist?list=PL1y1iaEtjSYiiSGVlL1cH...