Secure Coding in C and C++
Key Areas
String management
Pointer subterfuge
Dynamic memory management
Integral security
Formatted output
File I/O
String management:
Secure Coding in C/C++ : Strings
http://www.informit.com/articles/article.aspx?p=430402
Pointer Subterfuge:
Protecting against Pointer Subterfuge (from Michael Howard's Web Log) -
http://blogs.msdn.com/michael_howard/archive/2006/01/30/520200.aspx
http://blogs.msdn.com/michael_howard/archive/2006/08/16/702707.aspx
http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1301.pdf
www.sis.pitt.edu/~jjoshi/courses/IS2620/Spring09/Lecture5.ppt
https://www.securecoding.cert.org/confluence/download/attachments/3524/03+Pointer+Subterfuge.pdf?version=1
Secure Code Reviews :
http://www.slideshare.net/marco_morana/secure-code-reviews-presentation
http://www.computer.org/portal/site/security/menuitem.6f7b2414551cb84651286b108bcd45f3/index.jsp?&pName=security_level1_article&TheCat=1001&path=security/2006/v4n4&file=basic.xml&
http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=1588832
www.sis.pitt.edu/~jjoshi/courses/IS2620/Spring09/Lecture4.ppt