Re: Writing Secure code

From: K K Mookhey (ctoat_private)
Date: Fri Dec 27 2002 - 19:36:33 PST

Next message: Matt McClellan: "RE: Writing Secure code"

Previous message: Glynn Clements: "Re: Writing Secure code"
In reply to: Rahul Chander Kashyap: "Writing Secure code"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Do check out
http://www.dwheeler.com/secure-programs/
Although for Linux and Unix most of the principles apply to Windows as well.
There are books on the subject too.


> And one more thing...<this one might be intresting ;-)>  Is it possible
> to write code that is completely secure and not exploitable?
>
NO. First up, assuming you manage to plug in all the existing
vulnerabilities (and that is a big assumption in itself), you can never
guarantee security of code from a whole new as-yet-undiscovered class of
vulnerabilities. This is like asking, can I have a 100% secure hack-proof
server/network/firewall. One can only raise the barrier higher and get the
percentages on your side.

HTH

K. K. Mookhey
Chief Technology Officer
Network Intelligence India Pvt. Ltd.
Email: ctoat_private
Web: www.nii.co.in
Tel: 91-22-22001530/22006019
=============================
The Unix Auditor's Practical Handbook
http://www.nii.co.in/tuaph.html
=============================

Next message: Matt McClellan: "RE: Writing Secure code"
Previous message: Glynn Clements: "Re: Writing Secure code"
In reply to: Rahul Chander Kashyap: "Writing Secure code"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Dec 28 2002 - 00:16:47 PST