DocumentCode :
944182
Title :
Software security
Author :
McGraw, Gary
Volume :
2
Issue :
2
fYear :
2004
Firstpage :
80
Lastpage :
83
Abstract :
Software security is the idea of engineering software so that it continues to function correctly under malicious attack. Most technologists acknowledge this undertaking´s importance, but they need some help in understanding how to tackle it. The article aims to provide that help by exploring software security best practices. A central and critical aspect of the computer security problem is a software problem. Software defects with security ramifications, including implementation bugs such as buffer overflows and design flaws such as inconsistent error handling, promise to be with us for years. All too often, malicious intruders can hack into systems by exploiting software defects. Internet-enabled software applications present the most common security risk encountered today, with software´s ever-expanding complexity and extensibility adding further fuel to the fire. By any measure, security holes in software are common, and the problem is growing.
Keywords :
Internet; computer crime; risk management; software quality; software reliability; Internet-enabled software applications; best practices; buffer overflows; computer security problem; design flaws; implementation bugs; inconsistent error handling; malicious attack; malicious intruders; security holes; security ramifications; security risk; software defects; software security; Application software; Best practices; Buffer overflow; Computer bugs; Computer errors; Computer hacking; Computer security; Fuels; Internet; Software systems;
fLanguage :
English
Journal_Title :
Security & Privacy, IEEE
Publisher :
ieee
ISSN :
1540-7993
Type :
jour
DOI :
10.1109/MSECP.2004.1281254
Filename :
1281254
Link To Document :
بازگشت