Secure Coding in C and C++

Secure Coding in C and C++

Key Areas
String management
Pointer subterfuge
Dynamic memory management
Integral security
Formatted output
File I/O

String management:
Secure Coding in C/C++ : Strings
http://www.informit.com/articles/article.aspx?p=430402

Pointer Subterfuge:

Protecting against Pointer Subterfuge (from Michael Howard's Web Log) -

http://blogs.msdn.com/michael_howard/archive/2006/01/30/520200.aspx

http://blogs.msdn.com/michael_howard/archive/2006/08/16/702707.aspx

http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1301.pdf

www.sis.pitt.edu/~jjoshi/courses/IS2620/Spring09/Lecture5.ppt

https://www.securecoding.cert.org/confluence/download/attachments/3524/03+Pointer+Subterfuge.pdf?version=1

Secure Code Reviews :

http://www.slideshare.net/marco_morana/secure-code-reviews-presentation

http://www.computer.org/portal/site/security/menuitem.6f7b2414551cb84651286b108bcd45f3/index.jsp?&pName=security_level1_article&TheCat=1001&path=security/2006/v4n4&file=basic.xml&

http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=1588832

www.sis.pitt.edu/~jjoshi/courses/IS2620/Spring09/Lecture4.ppt