Secure programming

[Vijayaraghavan Kalyanapasupathy]

Hello All,

I recently became interested in writing programs that are "secure". Rather
late in the day, but better than never I guess.

In any case, I did come across a few books, but would like recommendations
and pointers. A book that explores different kinds of insecure programming
techniques, how to avoid them, discusses alternatives and is oriented
towards C++ programmer's would be great. I use C++ a lot and would rather
see code and examples and problems etc. than a more high-level book that
provides overviews and is targeted at managers.

thanx,
vijai.

 

[Jonathan Turkanis]

I recently became interested in writing programs that are "secure". Rather
late in the day, but better than never I guess.

In any case, I did come across a few books, but would like recommendations
and pointers. A book that explores different kinds of insecure programming
techniques, how to avoid them, discusses alternatives and is oriented
towards C++ programmer's would be great. I use C++ a lot and would rather
see code and examples and problems etc. than a more high-level book that
provides overviews and is targeted at managers.

"Building Secure Software" by Viega and McGraw looks pretty good. I
read the first chapter several months ago, then was interupted and
haven't had a chance to get back to it.

It seems to be pretty detail oriented, with lots of code examples in C
and Java.

Jonathan