[Ten dos and don'ts for secure coding]

[Ten dos and don'ts for secure coding] - Computers

Search Tech-Forums - link takes you to our Forum's search page.

Note: The following is only a text archive!

To view the actual forum discussion, please visit our website at http://www.tech-forums.net

Pages:1

Ten dos and don'ts for secure coding
(Click here to view the original thread with full colors/images)

Posted by: office politics

[URL=http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1172049,00.html]Ten dos and don'ts for secure coding[/url]
Michael Jordan
03.09.2006
Rating: -4.60- (out of 5)

I've performed many code reviews, and I've often seen developers make the same mistakes. In most cases these defects in the code simply result in a poor user experience, but in some cases they open holes for hackers. There are always the really gnarly situations that take hours to debug, but quiet often the simple mistakes are what come back to create crisis situations.

Security practitioners should understand how developers introduce security vulnerabilities into applications and work to support the developers in improving code quality and security. Encouragement and support for improvement must be a fundamental part of the charter of the security organization. The first step is to understand the kinds of mistakes that contribute to vulnerabilities. Let's review some common, fundamental dos and don'ts for secure coding.