Common · Literature
Secure coding
Practice of avoiding accidental introduction of security vulnerabilities while developing software
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities.
From Wikipedia
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities. Through the analysis of thousands of reported vulnerabilities, security professionals have discovered that most vulnerabilities stem from a relatively small number of common software programming errors. By identifying the insecure coding practices that lead to these errors and educating developers on secure alternatives, organizations can take proactive steps to help significantly reduce or eliminate vulnerabilities in software before deployment. Some scholars have suggested that in order to effectively confront threats related to cybersecurity, proper security should be coded or "baked in" to the systems. With security being designed into the software, this ensures that there will be protection against insider attacks and reduces the threat to application security. Implementing secure coding practices is part of the secure by design approach to security engineering.
Text: Wikipédia, CC BY-SA 4.0. ·
Related cards
-
★★★★
Open source
Practice of publishing digital resources publicly alongside their source code or source files
-
P★
PVS-Studio
Proprietary static code analyzer supporting C, C++, C# and Java
-
★★
RC4
Stream cipher
-
★★
Snippet (programming)
Programming term for a small region of re-usable source code, machine code, or text
-
★★
Spectre (security vulnerability)
Security vulnerability in microprocessors performing branch prediction
-
C★★
Certificate Transparency
Internet security standard for auditing digital certificates by creating public logs recording certificates issued by publicly trusted certificate authorities, allowing efficient identification of mistakenly or maliciously issued certificates
-
S★
SecuROM
Sony DRM software
-
★
Range coding
Entropy coding method defined by G. Nigel N. Martin in a 1979 paper, which effectively rediscovered the FIFO arithmetic code first introduced by Richard Clark Pasco in 1976
-
D★
Double-checked locking
Design pattern only locking if the locking criterion check indicates that locking is required
-
★
RSA Security
American computer and network security company
-
K★
Key size
Number of bits in a key used by a cryptographic algorithm
-
P★★★
Pretty Good Privacy
Computer program for data encryption, primarily in email (PGP)
-
L★★★
Log4Shell
2021 software security vulnerability
-
V★★
Video game programmer
Software engineer, programmer, or computer scientist who primarily develops codebase for video games
-
C★
CodinGame
Website
-
S★★★
Sandbox (computer security)
Software security mechanism
-
P★
Programming idiom
Recurring construct of code in some programming language
-
C★★
Code duello
Any of several set of rules for the practice of dueling