Secure Coding in C and C++: Of Strings and Integers

Authors:
Robert Seacord
Affiliations:
CERT/CC, Carnegie Mellon University
Venue:
IEEE Security and Privacy
Year:
2006

Citing 0
Cited 4

Moving beyond security tracks: integrating security in cs0 and cs1

Proceedings of the 39th SIGCSE technical symposium on Computer science education
Insecure context switching: inoculating regular expressions for survivability

WOOT'08 Proceedings of the 2nd conference on USENIX Workshop on offensive technologies
Mitigating program security vulnerabilities: Approaches and challenges

ACM Computing Surveys (CSUR)
Teaching Secure Coding Practices to STEM Students

Proceedings of the 2013 on InfoSecCD '13: Information Security Curriculum Development Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

C and C++ are reliable workhorses that developers commonly select for new projects, even in the absence of legacy code bases. Still, although the flexibility and performance of C and C++ aren't in question, security has increasingly become an issue. The C and C++ communities have recognized this and have taken steps to improve security at all levels, including improved standards, compiler implementations, and static and runtime analysis tools.