Professional Cocoa Application Security

The first comprehensive security resource for Mac and iPhone developers The Mac platform is legendary for security, but consequently, Apple developers have little appropriate security information available to help them assure that their applications are equally secure. This Wrox guide provides the first comprehensive go-to resource for Apple developers on the available frameworks and features that support secure application development. While Macs are noted for security, developers still need to design applications for the Mac and the iPhone with security in mind; this guide offers the first comprehensive reference to Apple’s application security frameworks and features Shows developers how to consider security throughout the lifecycle of a Cocoa application, including how Mac and iPhone security features work and how to leverage them Describes how to design, implement, and deploy secure Mac and iPhone software, covering how user configurations affect application security, the keychain feature, how to maximize filesystem security, how to write secure code, and much more Professional Cocoa Application Security arms Apple developers with essential information to help them create Mac and iPhone applications as secure as the operating system they run on.

Discover the untapped features of object-oriented programming and use it with other software tools to code fast, efficient applications. Key FeaturesExplore the complexities of object-oriented programming (OOP)Discover what OOP can do for youLearn to use the key tools and software engineering practices to support your own programming needsBook Description Your experience and knowledge always influence the approach you take and the tools you use to write your programs. With a sound understanding of how to approach your goal and what software paradigms to use, you can create high-performing applications quickly and efficiently. In this two-part book, you’ll discover the untapped features of object-oriented programming and use it with other software tools to code fast and efficient applications. The first part of the book begins with a discussion on how OOP is used today and moves on to analyze the ideas and problems that OOP doesn’t address. It continues by deconstructing the complexity of OOP, showing you its fundamentally simple core. You’ll see that, by using the distinctive elements of OOP, you can learn to build your applications more easily. The next part of this book talks about acquiring the skills to become a better programmer. You’ll get an overview of how various tools, such as version control and build management, help make your life easier. This book also discusses the pros and cons of other programming paradigms, such as aspect-oriented programming and functional programming, and helps to select the correct approach for your projects. It ends by talking about the philosophy behind designing software and what it means to be a "good" developer. By the end of this two-part book, you will have learned that OOP is not always complex, and you will know how you can evolve into a better programmer by learning about ethics, teamwork, and documentation. What you will learnUntangle the complexity of object-oriented programming by breaking it down to its essential building blocksRealize the full potential of OOP to design efficient, maintainable programsUtilize coding best practices, including TDD, pair programming and code reviews, to improve your workUse tools, such as source control and IDEs, to work more efficientlyLearn how to most productively work with other developersBuild your own software development philosophyWho this book is for This book is ideal for programmers who want to understand the philosophy behind creating software and what it means to be “good” at designing software. Programmers who want to deconstruct the OOP paradigm and see how it can be reconstructed in a clear, straightforward way will also find this book useful. To understand the ideas expressed in this book, you must be an experienced programmer who wants to evolve their practice.

Gain proficiency, productivity, and power by working on projects and kick-starting your career in Python with this comprehensive, hands-on guide. Key FeaturesUnderstand and utilize Python syntax, objects, methods, and best practicesExplore Python's many features and libraries through real-world problems and big dataUse your newly acquired Python skills in machine learning as well as web and software developmentBook Description Python is among the most popular programming languages in the world. It's ideal for beginners because it's easy to read and write, and for developers, because it's widely available with a strong support community, extensive documentation, and phenomenal libraries – both built-in and user-contributed. This project-based course has been designed by a team of expert authors to get you up and running with Python. You'll work though engaging projects that'll enable you to leverage your newfound Python skills efficiently in technical jobs, personal projects, and job interviews. The book will help you gain an edge in data science, web development, and software development, preparing you to tackle real-world challenges in Python and pursue advanced topics on your own. Throughout the chapters, each component has been explicitly designed to engage and stimulate different parts of the brain so that you can retain and apply what you learn in the practical context with maximum impact. By completing the course from start to finish, you'll walk away feeling capable of tackling any real-world Python development problem. What you will learnWrite efficient and concise functions using core Python methods and librariesBuild classes to address different business needsCreate visual graphs to communicate key data insightsOrganize big data and use machine learning to make regression and classification predictionsDevelop web pages and programs with Python tools and packagesAutomate essential tasks using Python scripts in real-time executionWho this book is for This book is for professionals, students, and hobbyists who want to learn Python and apply it to solve challenging real-world problems. Although this is a beginner's course, you'll learn more easily if you already have an understanding of standard programming topics like variables, if-else statements, and functions. Experience with another object-oriented program, though not essential, will also be beneficial. If Python is your first attempt at computer programming, this book will help you understand the basics with adequate detail for a motivated student.

ASP.NET Web API is a key part of ASP.NET MVC 4 and the platform of choice for building RESTful services that can be accessed by a wide range of devices. Everything from JavaScript libraries to RIA plugins, RFID readers to smart phones can consume your services using platform-agnostic HTTP. With such wide accessibility, securing your code effectively needs to be a top priority. You will quickly find that the WCF security protocols you’re familiar with from .NET are less suitable than they once were in this new environment, proving themselves cumbersome and limited in terms of the standards they can work with. Fortunately, ASP.NET Web API provides a simple, robust security solution of its own that fits neatly within the ASP.NET MVC programming model and secures your code without the need for SOAP, meaning that there is no limit to the range of devices that it can work with – if it can understand HTTP, then it can be secured by Web API. These SOAP-less security techniques are the focus of this book. What you’ll learn Identity management and cryptography HTTP basic and digest authentication and Windows authentication HTTP advanced concepts such as web caching, ETag, and CORS Ownership factors of API keys, client X.509 certificates, and SAML tokens Simple Web Token (SWT) and signed and encrypted JSON Web Token (JWT) OAuth 2.0 from the ground up using JWT as the bearer token OAuth 2.0 authorization codes and implicit grants using DotNetOpenAuth Two-factor authentication using Google Authenticator OWASP Top Ten risks for 2013Who this book is for No prior experience of .NET security is needed to read this book. All security related concepts will be introduced from first-principles and developed to the point where you can use them confidently in a professional environment. A good working knowledge of and experience with C# and the .NET framework are the only prerequisites to benefit from this book. Table of Contents Welcome to ASP.NET Web API Building RESTful Services Extensibility Points HTTP Anatomy and Security Identity Management Encryption and Signing Custom STS through WIF Knowledge Factors Ownership Factors Web Tokens OAuth 2.0 Using Live Connect API OAuth 2.0 From the Ground Up OAuth 2.0 Using DotNetOpenAuth Two-Factor Authentication Security Vulnerabilities Appendix: ASP.NET Web API Security Distilled

You’re smart and savvy, but you're also busy. This comprehensive guide to Apple's latest version of OS X, Lion, gives you everything you need to know to live a happy, productive Mac life. Learn OS X Lion will have you up and connected right away. With a minimum of overhead and a maximum of useful information, you’ll cover a lot of ground in the time it takes other books to get you plugged in. If this isn’t your first experience with OS X, skip right to the "What’s New in Lion" sections. You may also find yourself using this book as a quick refresher course or a way to learn new Mac skills you’ve never tried before.

This is the official curriculum of the Apple Mavericks 101: OS X Support Essentials 10.9 course and preparation for Apple Certified Support Professional (ACSP) 10.9 certification– as well as a top-notch primer for anyone who needs to support, troubleshoot, or optimize OS X Mavericks. This guide provides comprehensive coverage of Mavericks and is part of the Apple Pro Training series–the only Apple-certified books on the market. Designed for support technicians, help desk specialists, and ardent Mac users, this guide takes you deep inside the Mavericks operating system. Readers will find in-depth, step-bystep instruction on everything from installing and configuring Mavericks to managing networks and system administration.Whether you run a computer lab or an IT department, you’ll learn to set up users, configure system preferences, manage security and permissions, use diagnostic and repair tools, troubleshoot peripheral devices, and more–all on your way to preparing for the industry-standard ACSP certification. Covers updated system utilities and new features of OS X Mavericks, including iCloud Keychain and Tags. Features authoritative explanations of underlying technologies, troubleshooting, system administration, and much more. Focused lessons take you step by step through practical, realworld tasks. Lesson files and bonus material available for download–including lesson review questions summarizing what you’ve learned to prepare you for the Apple certification exam.

As technology continues to advance and more business is conducted online, the potential attack surface increases exponentially and the need for strong application security measures become more and more crucial. This goes double for any organization that handles sensitive personal or financial information which is usually subject to government regulation. The consequences of a successful attack at the application level can be devastating for an organization, ranging from loss of revenue, to damaged reputation, to potential fines and other penalties. This book also introduces you to: What's considered application security and what security professionals should know What developers or software engineers should know about common application vulnerabilities How to design, develop, and test applications so that the application or software is able to defend against exploits and attacks Ways to provide readers with fresh perspectives, various insights, and many practical ways to address cyber security related to application development This advice can be applied in development for web, mobile, APIs or other software development, in different development languages, in waterfall and agile software development lifecycle (SDLC), and in the cloud.

Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them. After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes. You’ll learn about: –The iOS security model and the limits of its built-in protections –The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard –How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto –Legacy flaws from C that still cause problems in modern iOS applications –Privacy issues related to gathering user data and how to mitigate potential pitfalls Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.