Communications of the ACM
Avoiding Defects in C Programming
Robert Seacord is a computer security specialist and author of Effective C, The CERT C Coding Standard, and Secure Coding in C and C++.
In an interview, Seacord discusses the top five security issues and the tools and techniques programmers can use to write secure code in C.
Topics include C standards, strings, arrays of chars, null pointers, buffer overflows, memory leaks, corrupt memory, bad inputs, dangling pointers, the stack, the heap, memory allocators, data structures, enum surprises, Annex K secure function options, static and dynamic analysis tools, good IDEs, MISRA C, CERT C, and writing C programs correctly to begin with rather than relying on trial and error techniques.
From Software Engineering Radio
View Full Article
No entries found