Question

I am starting to learn everything about security and secure programming.

I have always heard about things like buffer overflow vulnerability.

But I don’t know yet how such vulnerabilities are exploited.
And how can we program securely enough to make sure that our code is robust.

When I say all this, my programming languages of interest are c and c++.

1. I am looking for free tutorials, and resources on internet where I can learn every ins-n-out of secure programming.

2. Platform specific tips are also welcome. For example, I know that in Windows programming we can use functions like “memmove_s” to have secure code. But what are the equivalents in Linux/Unix? Or is it the same there?

3. Should a c/c++ programmer worry about specially crafted formatted stings (like the very popular old PHP formatted strings vulverability)?

A lot of questions here, but general idea is that I mean to learn Secure Programming.

Thanks for every bit of help.

Answer 1

Check out CERT C Secure Coding Standard & CERT C++ Secure Coding Standard.