[LINK] CWE/SANS TOP 25 Most Dangerous Programming Errors
sylvano at gnomon.com.au
Tue Jan 13 20:32:14 AEDT 2009
By way of The Register...
CWE/SANS TOP 25 Most Dangerous Programming Errors
(January 12, 2009) Today in Washington, DC, experts from more than 30 US and
international cyber security organizations jointly released the consensus list
of the 25 most dangerous programming errors that lead to security bugs and
that enable cyber espionage and cyber crime. Shockingly, most of these errors
are not well understood by programmers; their avoidance is not widely taught
by computer science programs; and their presence is frequently not tested by
organizations developing software for sale.
The impact of these errors is far reaching. Just two of them led to more than
1.5 million web site security breaches during 2008 - and those breaches
cascaded onto the computers of people who visited those web sites, turning
their computers into zombies.
full details at:
More information about the Link