mike.h on Sun, 17 Mar 2002 19:30:13 +0100


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Software security


I've worked for very large (100K +  employees) companies with very good
security policies. In a small office where I recently did some work, users
used their 2 letter initials as passwords. My sister works for a small
company where every user logs in as ADMIN! The security policies of the
establishment would seem at least as important as the features of the OS;
maybe more.

Meanwhile, I get several alerts every month about security flaws discovered
in common *nix programs. I'm not an expert in creating secure software, but
I would like to learn. I would be very interested in a discussion about how
to create programs that are free from buffer overflow problems and other
security weaknesses. Are there standard tools used to test software for
these types of problems? Are there standard techniques used to address them?

If anyone here has experience/expertise in this, I would greatly appreciate
your thoughts on how to improve my own software.

TIA,
-mike.h



______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug