mike.h on Sun, 17 Mar 2002 19:30:13 +0100 |
I've worked for very large (100K + employees) companies with very good security policies. In a small office where I recently did some work, users used their 2 letter initials as passwords. My sister works for a small company where every user logs in as ADMIN! The security policies of the establishment would seem at least as important as the features of the OS; maybe more. Meanwhile, I get several alerts every month about security flaws discovered in common *nix programs. I'm not an expert in creating secure software, but I would like to learn. I would be very interested in a discussion about how to create programs that are free from buffer overflow problems and other security weaknesses. Are there standard tools used to test software for these types of problems? Are there standard techniques used to address them? If anyone here has experience/expertise in this, I would greatly appreciate your thoughts on how to improve my own software. TIA, -mike.h ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|