Summary

Dan Bergh Johnsson, Daniel Deogun, and Daniel Sawano argue that security bugs mostly aren't found in a final penetration test; they're built in during design, and have to be designed back out. Central to the book is the domain primitive, a domain-driven design concept extended so that invalid data literally cannot be represented in the type system, meaning it can never reach business logic in the first place. The book moves from these code-level constructs, safe error handling, validation, and domain primitives, through applying the same thinking across a build-test-deploy pipeline, then into securing legacy systems and microservices specifically. It treats security less as a checklist and more as a property that falls out of good domain modeling.

Target Readers

• Engineers who already practice domain-driven design and want to extend its type-level rigor to security
• Developers who find security bugs mostly in late-stage penetration tests and want to catch them at design time instead
• Architects securing a microservices or legacy system who need code-level patterns, not only network-level controls

Colophon

Publisher

Mynavi Publishing

ISBN

978-4-8399-7599-9

Published

Sep 2021

List price

¥4,686incl. taxMay differ from the actual selling price on Amazon