Secure coding

This article is part of a series on
Computer security
Computer security (main article)
Related security categories
Internet security Cyberwarfare Information security Mobile security Network security
Threats
Computer crime Vulnerability Eavesdropping Exploits Trojans Viruses and worms Denial of service Malware Payloads Rootkits Keyloggers
Defenses
Access Control Systems Application security Antivirus software Secure coding Security by design Secure operating systems Authentication Multi-factor authentication Two-factor authentication Authorization Data-centric security Firewall (computing) Intrusion detection system Intrusion prevention system Mobile secure gateway

Securing coding is the practice of developing computer software in a way that guards against the accidental introduction of security vulnerabilities. Defects, bugs and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities. Through the analysis of thousands of reported vulnerabilities, security professionals have discovered that most vulnerabilities stem from a relatively small number of common software programming errors. By identifying the insecure coding practices that lead to these errors and educating developers on secure alternatives, organizations can take proactive steps to help significantly reduce or eliminate vulnerabilities in software before deployment.

See also

• Defensive programming
• Secure input and output handling
• Security bug

References

• Taylor, Art; Brian Buege; Randy Layman (2006). Hacking Exposed J2EE & Java. McGraw-Hill Primis. p. 426. ISBN 0-390-59975-1.