Advanced

New "Secure programmer" article: Call Components Safely

Posted by dwheeler on · Post a comment
IBM developerWorks; By David A. Wheeler
Mail this story
Print this story

The latest article in my "Secure Programmer" series is now available! This developerWorks series describes how to develop secure programs for Linux/Unix; this article describes how to securely invoke other programs.

Application programs typically make calls to other components, such as the underlying operating system, database systems, reusable libraries, Internet services (like DNS), Web services, and so on. This article explains how to prevent attackers from exploiting those calls to other components by discussing the use of only secure components, passing only valid data, making sure the data will be correctly interpreted, checking return values and exceptions, and protecting data as it flows between applications and components. Check out "Secure programmer: Call Components Safely" for more information.

Full Story

  Nav
» Read more about: Story Type: Tutorial

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post