Common · Literature
Secure coding
Practice of avoiding accidental introduction of security vulnerabilities while developing software
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities.
From Wikipedia
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities. Through the analysis of thousands of reported vulnerabilities, security professionals have discovered that most vulnerabilities stem from a relatively small number of common software programming errors. By identifying the insecure coding practices that lead to these errors and educating developers on secure alternatives, organizations can take proactive steps to help significantly reduce or eliminate vulnerabilities in software before deployment. Some scholars have suggested that in order to effectively confront threats related to cybersecurity, proper security should be coded or "baked in" to the systems. With security being designed into the software, this ensures that there will be protection against insider attacks and reduces the threat to application security. Implementing secure coding practices is part of the secure by design approach to security engineering.
Text: Wikipédia, CC BY-SA 4.0. ·
Related cards
-
I★
IBM DevOps Code ClearCase
Family of computer software tools that supports software configuration management of source code and other software development assets
-
S★★
Syslog
Network event logging system and protocol
-
A★
Attack surface
Vulnerable software environment where an unauthorized user can utilize as starting point to alter or extract data
-
★★★
Lovable (company)
AI based software to generate application code
-
J★
Java Card
Smart card
-
★★★
Encapsulation (computer programming)
Language mechanism in programming languages that allows external code not to care about the internal workings of an object
-
S★
Secure multi-party computation
Subfield of cryptography
-
★★
Component-based software engineering
Branch of software engineering
-
C★★
Commitment scheme
Cryptographic concept
-
T★
The Code Book
Book by Simon Singh
-
★
Pretty Easy privacy
Computer program
-
1★★★
1C:Enterprise
Development platform
-
C★★
CodeMonkey (software)
Educational computer coding environment
-
★★
Security alarm
System that detects unauthorised entry or hazards, often including sensors, cameras, and control units, and may be professionally monitored
-
O★★★
Obfuscation (software)
Creating difficult-to-understand computer code
-
★★
OWASP
Computer security organization
-
C★★
Code completion
Context-aware code completion feature in programming environments
-
V★
Vulnerability scanner
Software or other tool for probing computer systems for known security problems