Common · Literature
Secure coding
Practice of avoiding accidental introduction of security vulnerabilities while developing software
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities.
From Wikipedia
Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities. Through the analysis of thousands of reported vulnerabilities, security professionals have discovered that most vulnerabilities stem from a relatively small number of common software programming errors. By identifying the insecure coding practices that lead to these errors and educating developers on secure alternatives, organizations can take proactive steps to help significantly reduce or eliminate vulnerabilities in software before deployment. Some scholars have suggested that in order to effectively confront threats related to cybersecurity, proper security should be coded or "baked in" to the systems. With security being designed into the software, this ensures that there will be protection against insider attacks and reduces the threat to application security. Implementing secure coding practices is part of the secure by design approach to security engineering.
Text: Wikipédia, CC BY-SA 4.0. ·
Related cards
-
C★★
Code duello
Any of several set of rules for the practice of dueling
-
D★
Dynamic application security testing
A testing method that simulates external cyber attacks on running applications to detect vulnerabilities.
-
S★★★
S/MIME
Standard for public key encryption and signing of MIME data
-
A★★
AI safety
Research area on making artificial intelligence safe and beneficial
-
★★
Security operations center
Centralized unit that deals with security issues
-
S★★
Scaled agile framework
Set of organization and workflow patterns intended to guide enterprises in scaling lean and agile practices
-
C★
CodeChef
Global competitive programming platform
-
★★★
Magic number (programming)
Sequence of bytes used to identify or indicate the format of a file
-
S★★
Side-channel attack
Computer security attack that exploits information leaked through observable side effects of the system's implementation
-
★★★
Single sign-on
Property of access control whereby a single login is used to gain access to any of several related systems
-
L★
LOLCODE
Esoteric programming language
-
★★★★
Security.txt
File format for posting security contact information
-
★
History of software
Description of the evolution and development of software throughout history
-
★★
Quantum cryptography
The science of exploiting quantum mechanical properties to perform cryptographic tasks
-
A★
Automatic programming
Type of computer programming where some mechanism generates a computer program allowing programmers to write code at higher abstraction levels
-
J★★
Job security
Assurance that an individual is likely to retain employment, with relatively low chance of becoming unemployed
-
C★
Cloaking
Search engine optimization technique
-
★★
CODESYS
Development environment for programming controller applications