Common · Literature
Secure coding
Practice of avoiding accidental introduction of security vulnerabilities while developing software
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities.
From Wikipedia
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities. Through the analysis of thousands of reported vulnerabilities, security professionals have discovered that most vulnerabilities stem from a relatively small number of common software programming errors. By identifying the insecure coding practices that lead to these errors and educating developers on secure alternatives, organizations can take proactive steps to help significantly reduce or eliminate vulnerabilities in software before deployment. Some scholars have suggested that in order to effectively confront threats related to cybersecurity, proper security should be coded or "baked in" to the systems. With security being designed into the software, this ensures that there will be protection against insider attacks and reduces the threat to application security. Implementing secure coding practices is part of the secure by design approach to security engineering.
Text: Wikipédia, CC BY-SA 4.0. ·
Related cards
-
S★★
Secure copy protocol
Network protocol and program for copying files between computers
-
I★★
Insecure direct object reference
Type of access control vulnerability in digital security
-
S★
Secure Remote Password protocol
Cryptographic protocol for identification
-
S★★★★
Same-origin policy
The idea is to organize content based on the origin from which it arrives at the browser, preventing outside interference.
-
★
Cloud computing security
Broad set of policies, technologies, applications, and controls utilized to protect virtualized IP, data, applications, services, and the associated infrastructure of cloud computing
-
S★
Speech code
Non-statutory restriction on word choice
-
D★★
Defense in depth (computing)
In information security, the placing of multiple layers of security controls throughout an IT system to provide redundancy in the event a security control fails
-
W★
Web shell
Malicious web-based shell-like interface
-
★
Eraser (software)
File-deleting software
-
F★★
Fibonacci coding
Universal code
-
S★
Software system
System of intercommunicating components based on software forming part of a computer system
-
D★
Duplicity (software)
Backup software suite
-
★
Undo
Computer command
-
★★
LockBit
Criminal hacking organization
-
★★★
Algorithmic bias
Systematic and repeatable errors in a computer system that create unfair outcomes, such as privileging one arbitrary group of users over others
-
D★★
Debugging
Process of finding and resolving defects or problems within a computer program
-
★★★★
Software framework
Software that supports solution development via inversion of control
-
★★★★
Open source
Practice of publishing digital resources publicly alongside their source code or source files