Software Security Bibliography

[gem at cigital.com (Gary McGraw)]

Hi sc-l,

I have been having some out of band threads with a couple of people about what to read in software security.  I posted 
this once before to the list, but it's worth doing again...

In my book "Software Security" there is an extensive annotated bibliography published as Chapter 13.  The entire 
contents of that chapter are available for free on the book's website at this URL:
http://www.swsec.com/book/annotated-biblio-from-SS.pdf

Be forewarned, the bibliography is annotated with my opinions about the work cited and some may disagree with me.  
That's what science is all about!  There are some new books that have been published since the bibliography was built.  
Finding those is left as an exercise to the reader.

gem

company www.cigital.com
podcast www.cigital.com/silverbullet
blog www.cigital.com/justiceleague
book www.swsec.com