|
25 Most Dangerous Programming Errors |
|
Written by Peter Trzeciak
|
|
Monday, 12 January 2009 14:25 |
|
As our lives become more and more connected and increasingly depend on the on-line applications that access, transmit and store our most vital, personal information, there is hardly a day when we don't hear about identity theft and other hacking problems. It's not only a personal problem, but the whole world economy and the security of individual states depend on full control of the flow of information. The best indicator of how important this issue became, is the fact that representatives of the 30 biggest software/cyber security companies released a list of the 25 most dangerous programming errors. The announcement can be found on the SANS web site:
(January 12, 2009) Today in Washington, DC, experts from more than 30 US and international cyber security organizations jointly released the consensus list of the 25 most dangerous programming errors that lead to security bugs and that enable cyber espionage and cyber crime. Shockingly, most of these errors are not well understood by programmers; their avoidance is not widely taught by computer science programs; and their presence is frequently not tested by organizations developing software for sale.
The impact of these errors is far reaching. Just two of them led to more than 1.5 million web site security breaches during 2008 - and those breaches cascaded onto the computers of people who visited those web sites, turning their computers into zombies.
CWE/SANS TOP 25 Most Dangerous Programming Errors
|
|
Last Updated on Friday, 23 January 2009 08:05 |