Re: How to Write Secure Code

[Adam.Levine () BANKOFAMERICA COM (Adam.Levine () BANKOFAMERICA COM)]

In addition to standards for writing secure code, I would be very interested in
hearing about any tools that can be used to audit compliance with these
standards.  If you were going to audit an application where these standards did
not exist, what would you use to sift through millions of lines of code to
identify exposures?

Thanks ... Adam

B Potter <gdead () SHMOO COM> on 03/01/2000 04:51:48 PM

Please respond to B Potter <gdead () SHMOO COM>

To:   BUGTRAQ () SECURITYFOCUS COM
cc:
Subject:  How to Write Secure Code

Howdy,
In the process of writing and auditing our code, we've become increasingly
upset at the lack of documentation about writing secure code. To try and
fix that, and hopefully make your life easier in the process, we've
compiled a list of resources we've stumbled across. You can find it at
http://www.shmoo.com/securecode/    A similar list was posted to bugtraq a
few years ago, and this basically and updated/expanded version of that
list.

If you know of anything else that we should add, please let me know.
Thanks

bruce
the shmoo group
http://www.shmoo.com/