Search Results

ENGLISH

Designing Software Architectures - A Practical Approach, 2nd Edition

by Humberto Cervantes e Rick Kazman

~~55,64€~~ 50,08€ 10% OFF

 Learn how to create successful architectural designs and improve your current design practices! Designing Software Architectures, 2nd Edition, provides a practical, step-by-step methodology for architecture design that any professional software engineer can use, with structured methods supported by reusable chunks of design knowledge and rich case studies that demonstrate how to use the methods. The Attribute-Driven Design method may not have changed since this book''s first printing, but almost everything else about the industry has. In this newly updated edition, you will find new chapters on supporting business agility through API-centric design, deployability, cloud-based solutions, and technical debt in design. Humberto Cervantes and Rick Kazman illuminate best practices for how architects should design complex systems so you can make design decisions in systematic, repeatable, and cost-effective ways. This book will help you become a better, more confident designer who can create high-quality architectures with ease. The new edition includes: <ul> <li>A clear explanation of the Attribute-Driven Design method</li> <li>New chapters focused on the technical environments and contexts of contemporary design</li> <li>Two new case studies on The Hotel Pricing System and Digital Twin Platform</li> <li>Coverage of current architecture topics like cloud computing, DevOps, and large-scale systems</li> <li>Methods to make architecture design agile and achievable</li> </ul> Register your product at <a href="http://informit.com/register">informit.com/register</a> for convenient access to downloads, updates, and/or corrections as they become available.
ENGLISH

Designing Software Architectures - A Practical Approach, 2nd Edition

by Humberto Cervantes e Rick Kazman

~~55,64€~~ 50,08€ 10% OFF

 Learn how to create successful architectural designs and improve your current design practices! Designing Software Architectures, 2nd Edition, provides a practical, step-by-step methodology for architecture design that any professional software engineer can use, with structured methods supported by reusable chunks of design knowledge and rich case studies that demonstrate how to use the methods. The Attribute-Driven Design method may not have changed since this book''s first printing, but almost everything else about the industry has. In this newly updated edition, you will find new chapters on supporting business agility through API-centric design, deployability, cloud-based solutions, and technical debt in design. Humberto Cervantes and Rick Kazman illuminate best practices for how architects should design complex systems so you can make design decisions in systematic, repeatable, and cost-effective ways. This book will help you become a better, more confident designer who can create high-quality architectures with ease. The new edition includes: <ul> <li>A clear explanation of the Attribute-Driven Design method</li> <li>New chapters focused on the technical environments and contexts of contemporary design</li> <li>Two new case studies on The Hotel Pricing System and Digital Twin Platform</li> <li>Coverage of current architecture topics like cloud computing, DevOps, and large-scale systems</li> <li>Methods to make architecture design agile and achievable</li> </ul> Register your product at <a href="http://informit.com/register">informit.com/register</a> for convenient access to downloads, updates, and/or corrections as they become available.
ENGLISH

Software Security Engineering - A Guide For Project Managers

by Gary R. Mcgraw, Julia H. Allen, Nancy R. Mead, Robert J. Ellison e Sean Barnum

39,19€ + 10% CARD

 Providing readers with a set of sound practices they can selectively adopt to increase the security and dependability of software, both during its development and its operation, this guide draws extensively on the systematic approach developed for the Build Security In (BSI) Web site.
ENGLISH

Managing Technical Debt - Reducing Friction In Software Development

by Ipek Ozkaya, Philippe Kruchten e Robert Nord

37,09€ + 10% CARD

 <div> "This is an incredibly wise and useful book. The authors have considerable real-world experience in delivering quality systems that matter, and their expertise shines through in these pages. Here you will learn what technical debt is, what is it not, how to manage it, and how to pay it down in responsible ways. This is a book I wish I had when I was just beginning my career. The authors present a myriad of case studies, born from years of experience, and offer a multitude of actionable insights for how to apply it to your project." -Grady Booch, IBM Fellow </div> <div> </div> <div> Master Best Practices for Managing Technical Debt to Promote Software Quality and Productivity </div> As software systems mature, earlier design or code decisions made in the context of budget or schedule constraints increasingly impede evolution and innovation. This phenomenon is called technical debt, and practical solutions exist. In Managing Technical Debt, three leading experts introduce integrated, empirically developed principles and practices that any software professional can use to gain control of technical debt in any software system. Using real-life examples, the authors explain the forms of technical debt that afflict software-intensive systems, their root causes, and their impacts. They introduce proven approaches for identifying and assessing specific sources of technical debt, limiting new debt, and "paying off" debt over time. They describe how to establish managing technical debt as a core software engineering practice in your organization. <ul> <li>Discover how technical debt damages manageability, quality, productivity, and morale-and what you can do about it</li> <li>Clarify root causes of debt, including the linked roles of business goals, source code, architecture, testing, and infrastructure</li> <li>Identify technical debt items, and analyze their costs so you can prioritize action</li> <li>Choose the right solution for each technical debt item: eliminate, reduce, or mitigate</li> <li>Integrate software engineering practices that minimize new debt</li> </ul> <div> Managing Technical Debt will be a valuable resource for every software professional who wants to accelerate innovation in existing systems, or build new systems that will be easier to maintain and evolve. </div> <div> </div>
ENGLISH

Estimating Software-Intensive Systems - Projects, Products, And Processes

by Richard D. Stutzke

51,66€ + 10% CARD

 Many software projects fail because their leaders don''t know how to estimate, schedule, or measure them accurately. Fortunately, proven tools and techniques exist for every facet of software estimation. Estimating Software-Intensive Systems brings them together in a real-world guidebook that will help software managers, engineers, and customers immediately improve their estimates-and drive continuing improvements over time. Dick Stutzke presents here a disciplined and repeatable process that can produce accurate and complete estimates for any project, product, or process, no matter how new or unusual. Stutzke doesn''t just describe formal techniques: He offers simple, easy-to-use templates, spreadsheets, and tools you can start using today to identify and estimate product size, performance, and quality-as well as project cost, schedule, and risk reserves. Stutzke shows how to quickly "get your arms around" users'' problems and requirements, the structure of a solution, and the process needed to deliver it. You''ll learn how to choose the most appropriate estimating techniques and tools; collect accurate data, track progress, and update estimates; and recalibrate estimating models to improve estimation accuracy. Stutzke''s techniques apply whether you''re creating custom in-house business software, purchasing or customizing "off-the-shelf" technology, or constructing complex, one-of-a-kind military, industrial, or commercial systems. These techniques apply to small and large projects, and to all project life cycles-from agile to plan-driven. This book will help you plan, estimate, budget, schedule, purchase, design, build, test, deploy, operate, and maintain software-intensive systems. It explains how to size software, identify all cost components, calculate the associated costs, and set a competitive price. A separate section covers topics of interest for large projects: designing an appropriate work breakdown structure, collecting data from cost accounting systems, and using earned value measurement.
ENGLISH

Devops - A Software Architect''S Perspective

by Ingo Weber, Len Bass e Liming Zhu

37,09€ + 10% CARD

 This book provides a conceptual discussion of DevOps practices and their implications on system design. It covers team practices related to DevOps, build and test, deployment, and post deployment. This is the only book that deals with the system implications of DevOps. It includes case studies, references, practical examples and checklists for architects.
ENGLISH

Cert(R) C Coding Standard, Second Edition, The - 98 Rules For Developing Safe, Reliable, And Secure Systems

by Robert C. Seacord

56,96€ + 10% CARD

 "At Cisco, we have adopted the CERT C Coding Standard as the internal secure coding standard for all C developers. It is a core component of our secure development lifecycle. The coding standard described in this book breaks down complex software security topics into easy-to-follow rules with excellent real-world examples. It is an essential reference for any developer who wishes to write secure and resilient software in C and C++." —Edward D. Paradise, vice president, engineering, threat response, intelligence, and development, Cisco Systems Secure programming in C can be more difficult than even many experienced programmers realize. To help programmers write more secure code, The CERT® C Coding Standard, Second Edition, fully documents the second official release of the CERT standard for secure coding in C. The rules laid forth in this new edition will help ensure that programmers’ code fully complies with the new C11 standard; it also addresses earlier versions, including C99. The new standard itemizes those coding errors that are the root causes of current software vulnerabilities in C, prioritizing them by severity, likelihood of exploitation, and remediation costs. Each of the text’s 98 guidelines includes examples of insecure code as well as secure, C11-conforming, alternative implementations. If uniformly applied, these guidelines will eliminate critical coding errors that lead to buffer overflows, format-string vulnerabilities, integer overflow, and other common vulnerabilities. This book reflects numerous experts’ contributions to the open development and review of the rules and recommendations that comprise this standard. Coverage includes <ul> <li> <div style="MARGIN: 0px"> Preprocessor </div></li> <li> <div style="MARGIN: 0px"> Declarations and Initialization </div></li> <li> <div style="MARGIN: 0px"> Expressions </div></li> <li> <div style="MARGIN: 0px"> Integers </div></li> <li> <div style="MARGIN: 0px"> Floating Point </div></li> <li> <div style="MARGIN: 0px"> Arrays </div></li> <li> <div style="MARGIN: 0px"> Characters and Strings </div></li> <li> <div style="MARGIN: 0px"> Memory Management </div></li> <li> <div style="MARGIN: 0px"> Input/Output </div></li> <li> <div style="MARGIN: 0px"> Environment </div></li> <li> <div style="MARGIN: 0px"> Signals </div></li> <li> <div style="MARGIN: 0px"> Error Handling </div></li> <li> <div style="MARGIN: 0px"> Concurrency </div></li> <li> <div style="MARGIN: 0px"> Miscellaneous Issues </div></li> </ul>
ENGLISH

Common System And Software Testing Pitfalls - How To Prevent And Mitigate Them: Descriptions, Symptoms, Consequences, Causes, And Recommendations

by Donald G. Firesmith

27,60€ + 10% CARD

 "Don’s book is a very good addition both to the testing literature and to the literature on quality assurance and software engineering… . [It] is likely to become a standard for test training as well as a good reference for professional testers and developers. I would also recommend this book as background material for negotiating outsourced software contracts. I often work as an expert witness in litigation for software with very poor quality, and this book might well reduce or eliminate these lawsuits…." -Capers Jones, VP and CTO, Namcook Analytics LLC Software and system testers repeatedly fall victim to the same pitfalls. Think of them as "anti-patterns": mistakes that make testing far less effective and efficient than it ought to be. In Common System and Software Testing Pitfalls, Donald G. Firesmith catalogs 92 of these pitfalls. Drawing on his 35 years of software and system engineering experience, Firesmith shows testers and technical managers and other stakeholders how to avoid falling into these pitfalls, recognize when they have already fallen in, and escape while minimizing their negative consequences. Firesmith writes for testing professionals and other stakeholders involved in large or medium-sized projects. His anti-patterns and solutions address both "pure software" applications and "software-reliant systems," encompassing heterogeneous subsystems, hardware, software, data, facilities, material, and personnel. For each pitfall, he identifies its applicability, characteristic symptoms, potential negative consequences and causes, and offers specific actionable recommendations for avoiding it or limiting its consequences. This guide will help you <ul> <li>Pinpoint testing processes that need improvement-before, during, and after the project</li> <li>Improve shared understanding and collaboration among all project participants</li> <li>Develop, review, and optimize future project testing programs</li> <li>Make your test documentation far more useful</li> <li>Identify testing risks and appropriate risk-mitigation strategies</li> <li>Categorize testing problems for metrics collection, analysis, and reporting</li> <li>Train new testers, QA specialists, and other project stakeholders</li> </ul> With 92 common testing pitfalls organized into 14 categories, this taxonomy of testing pitfalls should be relatively complete. However, in spite of its comprehensiveness, it is also quite likely that additional pitfalls and even missing categories of pitfalls will be identified over time as testers read this book and compare it to their personal experiences. As an enhancement to the print edition, the author has provided the following location on the web where readers can find major additions and modifications to this taxonomy of pitfalls: <a href="http://donald.firesmith.net/home/common-testing-pitfalls">http://donald.firesmith.net/home/common-testing-pitfalls</a> Please send any recommended changes and additions to dgf (at) sei (dot) cmu (dot) edu, and the author will consider them for publication both on the website and in future editions of this book.
ENGLISH

Java Coding Guidelines - 75 Recommendations For Reliable And Secure Programs

by David Svoboda, Dean F. Sutherland, Dhruv Mohindra, Fred Long e Robert C. Seacord

29,14€ + 10% CARD

 <blockquote> "A must-read for all Java developers. . . . Every developer has a responsibility to author code that is free of significant security vulnerabilities. This book provides realistic guidance to help Java developers implement desired functionality with security, reliability, and maintainability goals in mind." -Mary Ann Davidson, Chief Security Officer, Oracle Corporation </blockquote> Organizations worldwide rely on Java code to perform mission-critical tasks, and therefore that code must be reliable, robust, fast, maintainable, and secure. Java™ Coding Guidelines brings together expert guidelines, recommendations, and code examples to help you meet these demands. Written by the same team that brought you The CERT® Oracle ® Secure Coding Standard for Java™, this guide extends that previous work’s expert security advice to address many additional quality attributes. You’ll find 75 guidelines, each presented consistently and intuitively. For each guideline, conformance requirements are specified; for most, noncompliant code examples and compliant solutions are also offered. The authors explain when to apply each guideline and provide references to even more detailed information. Reflecting pioneering research on Java security, Java™ Coding Guidelines offers updated techniques for protecting against both deliberate attacks and other unexpected events. You’ll find best practices for improving code reliability and clarity, and a full chapter exposing common misunderstandings that lead to suboptimal code. With a Foreword by James A. Gosling, Father of the Java Programming Language
ENGLISH

Model-Based Engineering With Aadl - An Introduction To The Sae Architecture Analysis & Design Language

by David P. Gluch e Peter H. Feiler

47,69€ + 10% CARD

 Coauthored by Peter H. Feiler, the standard's author and technical lead, this introductory reference and tutorial is ideal for self-directed learning or classroom instruction, and is an excellent reference for practitioners, including architects, developers, integrators, validators, certifiers, first-level technical leaders, and project managers.
ENGLISH

Secure Coding In C And C++

by Robert C. Seacord

60,94€ + 10% CARD

 Learn the Root Causes of Software Vulnerabilities and How to Avoid Them Commonly exploited software vulnerabilities are usually caused by avoidable software defects. Having analyzed tens of thousands of vulnerability reports since 1988, CERT has determined that a relatively small number of root causes account for most of the vulnerabilities. Secure Coding in C and C++, Second Edition, identifies and explains these root causes and shows the steps that can be taken to prevent exploitation. Moreover, this book encourages programmers to adopt security best practices and to develop a security mindset that can help protect software from tomorrow’s attacks, not just today’s. Drawing on the CERT’s reports and conclusions, Robert C. Seacord systematically identifies the program errors most likely to lead to security breaches, shows how they can be exploited, reviews the potential consequences, and presents secure alternatives. Coverage includes technical detail on how to <ul> <li>Improve the overall security of any C or C++ application</li> <li>Thwart buffer overflows, stack-smashing, and return-oriented programming attacks that exploit insecure string manipulation logic</li> <li>Avoid vulnerabilities and security flaws resulting from the incorrect use of dynamic memory management functions</li> <li>Eliminate integer-related problems resulting from signed integer overflows, unsigned integer wrapping, and truncation errors</li> <li>Perform secure I/O, avoiding file system vulnerabilities</li> <li>Correctly use formatted output functions without introducing format-string vulnerabilities</li> <li>Avoid race conditions and other exploitable vulnerabilities while developing concurrent code</li> </ul> The second edition features <ul> <li>Updates for C11 and C++11 </li> <li>Significant revisions to chapters on strings, dynamic memory management, and integer security</li> <li>A new chapter on concurrency</li> <li>Access to the online secure coding course offered through Carnegie Mellon’s Open Learning Initiative (OLI)</li> </ul> Secure Coding in C and C++, Second Edition, presents hundreds of examples of secure code, insecure code, and exploits, implemented for Windows and Linux. If you’re responsible for creating secure C or C++ software-or for keeping it safe-no other book offers you this much detailed, expert assistance.
ENGLISH

Cert Guide To Insider Threats - How To Prevent, Detect, And Respond To Information Technology Crimes (Theft, Sabotage, Fraud)

by Andrew P. Moore, Dawn M. Cappelli e Randall F. Trzeciak

44,71€ + 10% CARD

 Since 2001, the CERT® Insider Threat Center at Carnegie Mellon University’s Software Engineering Institute (SEI) has collected and analyzed information about more than seven hundred insider cyber crimes, ranging from national security espionage to theft of trade secrets. The CERT® Guide to Insider Threats describes CERT’s findings in practical terms, offering specific guidance and countermeasures that can be immediately applied by executives, managers, security officers, and operational staff within any private, government, or military organization. The authors systematically address attacks by all types of malicious insiders, including current and former employees, contractors, business partners, outsourcers, and even cloud-computing vendors. They cover all major types of insider cyber crime: IT sabotage, intellectual property theft, and fraud. For each, they present a crime profile describing how the crime tends to evolve over time, as well as motivations, attack methods, organizational issues, and precursor warnings that could have helped the organization prevent the incident or detect it earlier. Beyond identifying crucial patterns of suspicious behavior, the authors present concrete defensive measures for protecting both systems and data. This book also conveys the big picture of the insider threat problem over time: the complex interactions and unintended consequences of existing policies, practices, technology, insider mindsets, and organizational culture. Most important, it offers actionable recommendations for the entire organization, from executive management and board members to IT, data owners, HR, and legal departments. With this book, you will find out how to <ul> <li> <div style="MARGIN: 0px"> Identify hidden signs of insider IT sabotage, theft of sensitive information, and fraud </div></li> <li> <div style="MARGIN: 0px"> Recognize insider threats throughout the software development life cycle </div></li> <li> <div style="MARGIN: 0px"> Use advanced threat controls to resist attacks by both technical and nontechnical insiders </div></li> <li> <div style="MARGIN: 0px"> Increase the effectiveness of existing technical security tools by enhancing rules, configurations, and associated business processes </div></li> <li> <div style="MARGIN: 0px"> Prepare for unusual insider attacks, including attacks linked to organized crime or the Internet underground </div></li> </ul> By implementing this book’s security practices, you will be incorporating protection mechanisms designed to resist the vast majority of malicious insider attacks.
ENGLISH

Cert Oracle Secure Coding Standard For Java, The

by David Svoboda, Dean F. Sutherland, Dhruv Mohindra, Fred Long e Robert C. Seacord

35,88€ + 10% CARD

 "In the Java world, security is not viewed as an add-on a feature. It is a pervasive way of thinking. Those who forget to think in a secure mindset end up in trouble. But just because the facilities are there doesn’t mean that security is assured automatically. A set of standard practices has evolved over the years. The Secure® Coding® Standard for Java™ is a compendium of these practices. These are not theoretical research papers or product marketing blurbs. This is all serious, mission-critical, battle-tested, enterprise-scale stuff." —James A. Gosling, Father of the Java Programming Language An essential element of secure coding in the Java programming language is a well-documented and enforceable coding standard. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization, rather than by the programmer’s familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes). The CERT® Oracle® Secure Coding Standard for Java™ provides rules designed to eliminate insecure coding practices that can lead to exploitable vulnerabilities. Application of the standard’s guidelines will lead to higher-quality systems-robust systems that are more resistant to attack. Such guidelines are required for the wide range of products coded in Java-for devices such as PCs, game players, mobile phones, home appliances, and automotive electronics. After a high-level introduction to Java application security, seventeen consistently organized chapters detail specific rules for key areas of Java development. For each area, the authors present noncompliant examples and corresponding compliant solutions, show how to assess risk, and offer references for further information. Each rule is prioritized based on the severity of consequences, likelihood of introducing exploitable vulnerabilities, and cost of remediation. The standard provides secure coding rules for the Java SE 6 Platform including the Java programming language and libraries, and also addresses new features of the Java SE 7 Platform. It describes language behaviors left to the discretion of JVM and compiler implementers, guides developers in the proper use of Java’s APIs and security architecture, and considers security concerns pertaining to standard extension APIs (from the javax package hierarchy).The standard covers security issues applicable to these libraries: lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I/O, JMX, JNI, Math, Serialization, and JAXP.
ENGLISH

Cmmi For Services - Guidelines For Superior Service

by Brandon Buteau, Eileen Forrester e Sandra Shrum

55,76€ + 10% CARD

 CMMI® for Services (CMMI-SVC) is a comprehensive set of guidelines to help organizations establish and improve processes for delivering services. By adapting and extending proven standards and best practices to reflect the unique challenges faced in service industries, CMMI-SVC offers providers a practical and focused framework for achieving higher levels of service quality, controlling costs, improving schedules, and ensuring user satisfaction. A member of the newest CMMI model, CMMI-SVC Version 1.3, reflects changes to the model made for all constellations, including clarifications of high-maturity practices, alignment of the sixteen core process areas, and improvements in the SCAMPI appraisal method. The indispensable CMMI® for Services, Second Edition, is both an introduction to the CMMI-SVC model and an authoritative reference for it. The contents include the complete model itself, formatted for quick reference. In addition, the book’s authors have refined the model’s introductory chapters; provided marginal notes to clarify the nature of particular process areas and to show why their practices are valuable; and inserted longer sidebars to explain important concepts. Brief essays by people with experience in different application areas further illustrate how the model works in practice and what benefits it offers. The book is divided into three parts. Part One begins by thoroughly explaining CMMI-SVC, its concepts, and its use. The authors provide robust information about service concepts, including a discussion of lifecycles in service environments; outline how to start using CMMI-SVC; explore how to achieve process improvements that last; and offer insights into the relationships among process areas. Part Two describes generic goals and practices, and then details the complete set of twenty-four CMMI-SVC process areas, including specific goals, specific practices, and examples. The process areas are organized alphabetically by acronym and are tabbed for easy reference. Part Three contains several useful resources, including CMMI-SVC-related references, acronym definitions, a glossary of terms, and an index. Whether you are new to CMMI models or are already familiar with one or more of them, this book is an essential resource for service providers interested in learning about or implementing process improvement.
ENGLISH

Cmmi For Development - Guidelines For Process Integration And Product Improvement

by Mary Beth Chrissis, Mike Konrad e Sandra Shrum

52,44€ + 10% CARD

 This single volume comprises the full, official book version of the CMMI, the much-anticipated follow up to the Capability Maturity Model.
ENGLISH

Creating And Using Virtual Prototyping Software - Principles And Practices

by Douglass E. Post e Richard P. Kendall

45,04€ + 10% CARD

 <div> Develop, Deploy, and Sustain High-Performance Virtual Prototyping for Advanced R&D </div> <div> </div> <div> </div> <div> Organizations must reduce time-to-market, costs, and risks while producing higher-quality products that grow ever more complex. In response, many are turning to advanced software for rapidly creating and analyzing virtual prototypes, and accurately predicting the performance and behavior of the systems they represent. This requires a deep understanding of physics-based digital engineering and high-performance computing, as well as unique organizational and management skills. Now, Douglass Post and Richard Kendall bring together knowledge that engineers, scientists, developers, and managers will need to build, deploy, and sustain these specialized applications—including information previously available only in proprietary environments. </div> <div> </div> <div> </div> <div> Post and Kendall illuminate key issues with a detailed book-length case study based on their work at the U.S. DoD''s pioneering Computational Research and Engineering Acquisition Tools and Environments (CREATE) program, which developed eleven of the field''s most advanced software tools. </div> <div> </div> <div> </div> <div> You''ll find a detailed roadmap for planning, organizing, managing, and navigating complex organizations to successful delivery; as well as detailed descriptions of each step in the process, with clear rationales and concrete examples. The authors share detailed references, a convenient glossary and bibliography, sidebars on overcoming real-world challenges, and more. The book reviews the essentials of computational engineering and science and the pivotal role of virtual prototyping. It helps readers to: </div> <div> </div> <div> <ul> <li>Plan and manage the paradigm shift from physical to virtual prototyping</li> <li>Establish, execute, and evolve Agile processes for developing virtual prototyping software</li> <li>Understand and implement virtual prototyping tools and workflows</li> <li>Verify and validate prototyping systems to ensure accuracy and utility</li> <li>Recruit and retain a specialized workforce, and train and support users</li> <li>Explore additional emerging roles for virtual prototyping</li> </ul> </div> <div> </div>
ENGLISH

Designing Software Architectures - A Practical Approach

by Humberto Cervantes e Rick Kazman

46,36€ + 10% CARD

 Designing Software Architectures is the first step-by-step guide to making the crucial design decisions that can make or break your software architecture. SEI expert Rick Kazman and Dr. Humberto Cervantes provide comprehensive guidance for ensuring that your architectural design decisions are consistently rational and evidence-based.
ENGLISH

Software Architecture In Practice

by Len Bass, Paul Clements e Rick Kazman

55,64€ + 10% CARD

 The Definitive, Practical, Proven Guide to Architecting Modern Software--Fully Updated with New Content on Mobility, the Cloud, Energy Management, DevOps, Quantum Computing, and More Updated with eleven new chapters, Software Architecture in Practice, Fourth Edition, thoroughly explains what software architecture is, why it''s important, and how to design, instantiate, analyze, evolve, and manage it in disciplined and effective ways. Three renowned software architects cover the entire lifecycle, presenting practical guidance, expert methods, and tested models for use in any project, no matter how complex. You''ll learn how to use architecture to address accelerating growth in requirements, system size, and abstraction, and to manage emergent quality attributes as systems are dynamically combined in new ways. With insights for utilizing architecture to optimize key quality attributes--including performance, modifiability, security, availability, interoperability, testability, usability, deployability, and more--this guide explains how to manage and refine existing architectures, transform them to solve new problems, and build reusable architectures that become strategic business assets. <ul> <li>Discover how architecture influences (and is influenced by) technical environments, project lifecycles, business profiles, and your own practices</li> <li>Leverage proven patterns, interfaces, and practices for optimizing quality through architecture</li> <li>Architect for mobility, the cloud, machine learning, and quantum computing</li> <li>Design for increasingly crucial attributes such as energy efficiency and safety</li> <li>Scale systems by discovering architecturally significant influences, using DevOps and deployment pipelines, and managing architecture debt</li> <li>Understand architecture''s role in the organization, so you can deliver more value</li> </ul> Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.
ENGLISH

Managing Technical Debt - Reducing Friction In Software Development

by Ipek Ozkaya e Philippe Kruchten

37,09€ + 10% CARD

 <div> "This is an incredibly wise and useful book. The authors have considerable real-world experience in delivering quality systems that matter, and their expertise shines through in these pages. Here you will learn what technical debt is, what is it not, how to manage it, and how to pay it down in responsible ways. This is a book I wish I had when I was just beginning my career. The authors present a myriad of case studies, born from years of experience, and offer a multitude of actionable insights for how to apply it to your project." -Grady Booch, IBM Fellow </div> <div> </div> <div> Master Best Practices for Managing Technical Debt to Promote Software Quality and Productivity </div> As software systems mature, earlier design or code decisions made in the context of budget or schedule constraints increasingly impede evolution and innovation. This phenomenon is called technical debt, and practical solutions exist. In Managing Technical Debt, three leading experts introduce integrated, empirically developed principles and practices that any software professional can use to gain control of technical debt in any software system. Using real-life examples, the authors explain the forms of technical debt that afflict software-intensive systems, their root causes, and their impacts. They introduce proven approaches for identifying and assessing specific sources of technical debt, limiting new debt, and "paying off" debt over time. They describe how to establish managing technical debt as a core software engineering practice in your organization. <ul> <li>Discover how technical debt damages manageability, quality, productivity, and morale-and what you can do about it</li> <li>Clarify root causes of debt, including the linked roles of business goals, source code, architecture, testing, and infrastructure</li> <li>Identify technical debt items, and analyze their costs so you can prioritize action</li> <li>Choose the right solution for each technical debt item: eliminate, reduce, or mitigate</li> <li>Integrate software engineering practices that minimize new debt</li> </ul> <div> Managing Technical Debt will be a valuable resource for every software professional who wants to accelerate innovation in existing systems, or build new systems that will be easier to maintain and evolve. </div> <div> </div>
ENGLISH

Software Security Engineering - A Guide For Project Managers

by Gary R. Mcgraw, Julia H. Allen, Nancy R. Mead, Robert J. Ellison e Sean Barnum

56,96€ + 10% CARD

 Providing readers with a set of sound practices they can selectively adopt to increase the security and dependability of software, both during its development and its operation, this guide draws extensively on the systematic approach developed for the Build Security In (BSI) Web site.
ENGLISH

Cyber-Physical Systems

by Dionisio De Niz, Mark Klein e Raj Rajkumar

46,36€ + 10% CARD

 Learn the State of the Art in Embedded Systems and Embrace the Internet of Things The next generation of mission-critical and embedded systems will be "cyber physical": They will demand the precisely synchronized and seamless integration of complex sets of computational algorithms and physical components. Cyber-Physical Systems is the definitive guide to building cyber-physical systems (CPS) for a wide spectrum of engineering and computing applications. Three pioneering experts have brought together the field’s most significant work in one volume that will be indispensable for all practitioners, researchers, and advanced students. This guide addresses CPS from multiple perspectives, drawing on extensive contributions from leading researchers. The authors and contributors review key CPS challenges and innovations in multiple application domains. Next, they describe the technical foundations underlying modern CPS solutions—both what we know and what we still need to learn. Throughout, the authors offer guiding principles for every facet of CPS development, from design and analysis to planning future innovations. Comprehensive coverage includes <ul> <li>Understanding CPS drivers, challenges, foundations, and emerging directions</li> <li>Building life-critical, context-aware, networked systems of medical devices</li> <li>Creating energy grid systems that reduce costs and fully integrate renewable energy sources</li> <li>Modeling complex interactions across cyber and physical domains</li> <li>Synthesizing algorithms to enforce CPS control</li> <li>Addressing space, time, energy, and reliability issues in CPS sensor networks</li> <li>Applying advanced approaches to real-time scheduling</li> <li>Securing CPS: preventing "man-in-the-middle" and other attacks</li> <li>Ensuring logical correctness and simplifying verification</li> <li>Enforcing synchronized communication between distributed agents</li> <li>Using model-integration languages to define formal semantics for CPS models</li> </ul> Register your product at <a href="http://informit.com/register" target="" title="">informit.com/register</a> for convenient access to downloads, updates, and corrections as they become available.
ENGLISH

Cyber-Physical Systems

by Dionisio De Niz, Mark Klein e Raj Rajkumar

59,35€ + 10% CARD

 Learn the State of the Art in Embedded Systems and Embrace the Internet of Things The next generation of mission-critical and embedded systems will be "cyber physical": They will demand the precisely synchronized and seamless integration of complex sets of computational algorithms and physical components. Cyber-Physical Systems is the definitive guide to building cyber-physical systems (CPS) for a wide spectrum of engineering and computing applications. Three pioneering experts have brought together the field’s most significant work in one volume that will be indispensable for all practitioners, researchers, and advanced students. This guide addresses CPS from multiple perspectives, drawing on extensive contributions from leading researchers. The authors and contributors review key CPS challenges and innovations in multiple application domains. Next, they describe the technical foundations underlying modern CPS solutions—both what we know and what we still need to learn. Throughout, the authors offer guiding principles for every facet of CPS development, from design and analysis to planning future innovations. Comprehensive coverage includes <ul> <li>Understanding CPS drivers, challenges, foundations, and emerging directions</li> <li>Building life-critical, context-aware, networked systems of medical devices</li> <li>Creating energy grid systems that reduce costs and fully integrate renewable energy sources</li> <li>Modeling complex interactions across cyber and physical domains</li> <li>Synthesizing algorithms to enforce CPS control</li> <li>Addressing space, time, energy, and reliability issues in CPS sensor networks</li> <li>Applying advanced approaches to real-time scheduling</li> <li>Securing CPS: preventing "man-in-the-middle" and other attacks</li> <li>Ensuring logical correctness and simplifying verification</li> <li>Enforcing synchronized communication between distributed agents</li> <li>Using model-integration languages to define formal semantics for CPS models</li> </ul> Register your product at <a href="http://informit.com/register" target="" title="">informit.com/register</a> for convenient access to downloads, updates, and corrections as they become available.
ENGLISH

Cyber Security Engineering - A Practical Approach For Systems And Software Assurance

by Carol Woody e Nancy R. Mead

37,09€ + 10% CARD

 Cyber Security Engineering is the definitive modern reference and tutorial on the full range of capabilities associated with modern cyber security engineering. Pioneering software assurance experts Dr. Nancy R. Mead and Dr. Carol C. Woody bring together comprehensive best practices for building software systems that exhibit superior operational security, and for considering security throughout your full system development and acquisition lifecycles. Drawing on their pioneering work at the Software Engineering Institute (SEI) and Carnegie Mellon University, Mead and Woody introduce seven core principles of software assurance, and show how to apply them coherently and systematically. Using these principles, they help you prioritize the wide range of possible security actions available to you, and justify the required investments. Cyber Security Engineering guides you through risk analysis, planning to manage secure software development, building organizational models, identifying required and missing competencies, and defining and structuring metrics. Mead and Woody address important topics, including the use of standards, engineering security requirements for acquiring COTS software, applying DevOps, analyzing malware to anticipate future vulnerabilities, and planning ongoing improvements. This book will be valuable to wide audiences of practitioners and managers with responsibility for systems, software, or quality engineering, reliability, security, acquisition, or operations. Whatever your role, it can help you reduce operational problems, eliminate excessive patching, and deliver software that is more resilient and secure.
ENGLISH

Cyber Security Engineering - A Practical Approach For Systems And Software Assurance

by Carol Woody e Nancy R. Mead

37,09€ + 10% CARD

 Cyber Security Engineering is the definitive modern reference and tutorial on the full range of capabilities associated with modern cyber security engineering. Pioneering software assurance experts Dr. Nancy R. Mead and Dr. Carol C. Woody bring together comprehensive best practices for building software systems that exhibit superior operational security, and for considering security throughout your full system development and acquisition lifecycles. Drawing on their pioneering work at the Software Engineering Institute (SEI) and Carnegie Mellon University, Mead and Woody introduce seven core principles of software assurance, and show how to apply them coherently and systematically. Using these principles, they help you prioritize the wide range of possible security actions available to you, and justify the required investments. Cyber Security Engineering guides you through risk analysis, planning to manage secure software development, building organizational models, identifying required and missing competencies, and defining and structuring metrics. Mead and Woody address important topics, including the use of standards, engineering security requirements for acquiring COTS software, applying DevOps, analyzing malware to anticipate future vulnerabilities, and planning ongoing improvements. This book will be valuable to wide audiences of practitioners and managers with responsibility for systems, software, or quality engineering, reliability, security, acquisition, or operations. Whatever your role, it can help you reduce operational problems, eliminate excessive patching, and deliver software that is more resilient and secure.
Loading results...

View more results