caleb.dods (at) bell (dot) ca [email concealed] wrote:

> I have a background in programming and code inspection. However our
> inspections were not targeted at security, instead they looked for
> logic errors, over complex code, missing comments, etc.
>
> With security in mind what things other things should I be looking
> for in a code inspection?

Well, you'll want to read "Secure Programming for Linux and Unix HOWTO"
by David A. Wheeler, available at <http://www.dwheeler.com/secure-programs/>

Although it has "Linux" and "Unix" in its name, I find it very helpful
to get a feeling about potential problems that might strike you on other
platforms.

j.

[ reply ]