---
title: "[Book] Writing Secure Code, 2nd Edition"
url: "https://osherove.com/blog/2004/2/22/book-writing-secure-code-2nd-edition.md"
canonical: "https://osherove.com/blog/2004/2/22/book-writing-secure-code-2nd-edition.html"
published: "2004-02-22T17:34:00"
updated: "2004-02-22T17:34:00"
tags: [".Net Original"]
author: "Roy Osherove"
description: "Ever since we got the book Writing Secure Code 2nd edition at DevDays, I've been reading about a chapter a day. I have to say that a subject that I thought was dull,boring and basically “un-learnable” suddenly takes new…"
usage: "Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page)."
license: "https://creativecommons.org/licenses/by/4.0/"
---

# \[Book\] Writing Secure Code, 2nd Edition

By Roy Osherove February 22, 2004 In [.Net Original](https://osherove.com/blog/category/net-original)

**Historical article** · Originally published February 22, 2004; technical details may be outdated.

Ever since we got the book [Writing Secure Code](https://www.amazon.com/exec/obidos/ASIN/0735617228/iserializable-20) 2nd edition at DevDays, I've been reading about a chapter a day.

I have to say that a subject that I thought was dull,boring and basically “un-learnable” suddenly takes new life in my brain and I am both intrigued and shocked at how non-security-minded I've been, and so are many people I know.

All I can say is that you need to [**get this book now**](https://www.amazon.com/exec/obidos/ASIN/0735617228/iserializable-20), and start reading.

It feels heavy but the first 5 chapters deal with nothing but the “why”s and “how”s of learning and training and instilling security minded development in the organization and it was a breeze to read. I was afraid that I'd be quickly putting it down for being too much .. anything, but I was wrong.

You should know a little C++\\C to get some of the sample code, but the main ideas are security concepts and not coding concepts, and they are pretty language agnostic.

Even if you think you don't want to read it, you do. You really really do.

## More in .Net Original

[All posts in .Net Original](https://osherove.com/blog/category/net-original)

- Feb 23, 2004

    ### [Asp.Net slider control?](https://osherove.com/blog/2004/2/23/aspnet-slider-control.html)

- Feb 22, 2004

    ### [.Net user group review: BizTalk rules engine](https://osherove.com/blog/2004/2/22/net-user-group-review-biztalk-rules-engine.html)

- Feb 21, 2004

    ### [Iterating over collections - As simple as possible, but no simpler.](https://osherove.com/blog/2004/2/21/iterating-over-collections-as-simple-as-possible-but-no-simp.html)

- Feb 19, 2004

    ### [Mortal sin: Just "Doit"](https://osherove.com/blog/2004/2/19/mortal-sin-just-quotdoitquot.html)


---

## About the author

**Roy Osherove**: Senior Solutions Architect at AWS working on AI for production and AI-driven development; author of The Art of Unit Testing and Elastic Leadership, with about 20 years of consulting and training on unit testing, TDD, team leadership and continuous delivery.

### Sites

- [RobotPaper](https://robotpaper.ai/): This blog: AI patterns and anti-patterns, AI and coding agents, and engineering leadership.
- [osherove.com](https://osherove.com): Roy's personal site. Author of The Art of Unit Testing and Elastic Leadership; consulting and training on unit testing, TDD, team leadership and continuous delivery, plus about 20 years of blog posts.
- [The Art of Unit Testing](https://www.artofunittesting.com): The Art of Unit Testing, 3rd Edition (Manning): readable, maintainable, trustworthy unit tests, plus TDD workshops in C#, JavaScript, Java and Kotlin.
- [5whys.com](https://www.5whys.com): Roy's writing on software team leadership: self-organizing teams, surviving chaos, learning mode and the Elastic Leadership model.
- [Pipeline Driven](https://pipelinedriven.org): Continuous delivery and DevOps practices: build patterns, pipeline-friendly testing, DevOps metrics and enterprise DevOps.
- [Elastic Leadership](https://www.elasticleadership.com): Elastic Leadership, Roy's framework for software team leaders (survival, learning and self-organizing modes).

### Social

- X: https://x.com/royosherove
- LinkedIn: https://www.linkedin.com/in/osherove/

### Contact

- Contact form: https://forms.gle/jQSx5KoXvrVA1JCK7

### License

Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page). License: https://creativecommons.org/licenses/by/4.0/