Naresh Reddy on Sun, 17 Mar 2002 22:50:14 +0100


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Software security


Mike.h,

I am also interested in security. There is a chapter devoted to securing
programs, in the book , "Linux Programming Unleashed" by Kurt Wall. The
ISBN number is : 0672320215. I am not sure, but I THINK almost every linux
programming book should have a chapter on this topic. I would like to know
if there are any free web sources / tips, I should know when I am coding.

Naresh


-----------------------------------
Naresh Reddy
nyg102@psu.edu
http://www.personal.psu.edu/nyg102
-----------------------------------

On Sun, 17 Mar 2002, mike.h wrote:

> I've worked for very large (100K +  employees) companies with very good
> security policies. In a small office where I recently did some work, users
> used their 2 letter initials as passwords. My sister works for a small
> company where every user logs in as ADMIN! The security policies of the
> establishment would seem at least as important as the features of the OS;
> maybe more.
>
> Meanwhile, I get several alerts every month about security flaws discovered
> in common *nix programs. I'm not an expert in creating secure software, but
> I would like to learn. I would be very interested in a discussion about how
> to create programs that are free from buffer overflow problems and other
> security weaknesses. Are there standard tools used to test software for
> these types of problems? Are there standard techniques used to address them?
>
> If anyone here has experience/expertise in this, I would greatly appreciate
> your thoughts on how to improve my own software.
>
> TIA,
> -mike.h
>
>
>
> ______________________________________________________________________
> Philadelphia Linux Users Group       -      http://www.phillylinux.org
> Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
> General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug
>
>
>


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug