C++ Security

“Validating C and C++ for Safety and Security”

http://www.ddj.com/dept/security/184402075

Article: “Validating C and C++ for Safety and Security” by Robert C. Seacord. Provides advice on structuring manual source-code security audits to improve the security of C++ code. Includes code examples and tables to illustrate techniques.

Secure Programming Cookbook for C and C++

http://www.amazon.com/exec/obidos/ASIN/0596003943/deitelassociatin

Book: Secure Programming Cookbook for C and C++, by John Viega and Matt Messier.

“Elements of Security” Chart

http://www.boic.com/security.htm?gs2-01#elements

“Elements of Security” chart lists various threats to a system, the vulnerabilities and the measure required to counter the threat.

C++ Security Properties

http://info.borland.com/techpubs/bes/v65/html_books/securityguide/cppprops.html

List of security properties for C++ and descriptions of each.

"Interoperating with a C++ Common Object..."

http://publib.boulder.ibm.com/infocenter/wasinfo/v6r0/index.jsp?topic=/com.ibm.websphere.express.doc/info/exp/ae/tsec_interoperatec.html

“Interoperating with a C++ Common Object Request Broker Architecture Client,” from IBM. Discusses authentication between a CORBA client and an IBM WebSphere Application Server.

“Security Best practices for C++”

http://msdn2.microsoft.com/en-US/library/k3a3hzw7(en-US,VS.80).aspx

“Security Best practices for C++” from Microsoft. Discusses C++ security features, checked iterators, code analysis for managed code, Windows Application Verifier and .NET security features.

“C++ Security Reference”

http://e-docs.bea.com/tuxedo/tux80/security/cplus.htm

“C++ Security Reference” from BEA. Discusses C++ method descriptions for CORBA security.

Secure Coding in C and C++

http://www.amazon.com/Secure-Coding-C%2B%2B-Software-Engineering/dp/0321335724/ref=pd_sim_b_5/105-8731848-0743668

Book: Secure Coding in C and C++, by Robert C. Seacord (September 2005). Explains the root causes that account for most security vulnerabilities and how to write C++ code to prevent exploitation. Includes examples of secure code, insecure code and exploits.

“Saying Goodbye to an Old Friend”

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure03102004.asp

Article: “Saying Goodbye to an Old Friend” by Michael Howard. Describes the security risks in using functions from the C run-time library (CRT), the C++ Standard Template Library (STL) and how Visual C++ 2005 will address these issues. Includes the documentation for the security-enhanced versions of the CRT functions at http://msdn2.microsoft.com/en-us/library/wd3wzwts(VS.80).aspx.

< BACK 1 of 1 NEXT >