This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Code Review Guide Table of Contents"
From OWASP
(→References) |
|||
| Line 15: | Line 15: | ||
==[[Automating Code Reviews]] == | ==[[Automating Code Reviews]] == | ||
==[[References]]== | ==[[References]]== | ||
| + | # Brian Chess and Gary McGraw. "Static Analysis for Security," ''IEEE Security & Privacy'' 2(6), 2004, pp. 76-79. | ||
| + | # M. E. Fagan. "Design and Code Inspections to Reduce Errors in Program Development," ''IBM Systems J.'' 15(3), 1976, pp. 182-211. | ||
| + | # Tom Gilb and Dorothy Graham. ''Software Inspection''. Addison-Wesley, Wokingham, England, 1993. | ||
| + | # Michael Howard and David LeBlanc. ''Writing Secure Code, 2nd edition''. Microsoft Press, Redmond, WA, 2003. | ||
| + | # Gary McGraw. ''Software Security''. Addison-Wesley, Boston, MA, 2006. | ||
| + | # John Viega and Gary McGraw. ''Building Secure Software: How to Avoid Security Problems the Right Way.'' Addison-Wesley, Boston, MA, 2001. | ||
| + | # Karl E. Wiegers. ''Peer Reviews in Software''. Addison-Wesley, Boston, MA, 2002. | ||
| + | |||
| + | |||
| + | [[Category:OWASP Code Review Project]] | ||
Revision as of 12:09, 28 June 2006
Introduction
Buffer Overruns and Overflows
OS Injection
SQL Injection
Data Validation
Error Handling
The Secure Code Environment
Transaction Analysis
Automating Code Reviews
References
- Brian Chess and Gary McGraw. "Static Analysis for Security," IEEE Security & Privacy 2(6), 2004, pp. 76-79.
- M. E. Fagan. "Design and Code Inspections to Reduce Errors in Program Development," IBM Systems J. 15(3), 1976, pp. 182-211.
- Tom Gilb and Dorothy Graham. Software Inspection. Addison-Wesley, Wokingham, England, 1993.
- Michael Howard and David LeBlanc. Writing Secure Code, 2nd edition. Microsoft Press, Redmond, WA, 2003.
- Gary McGraw. Software Security. Addison-Wesley, Boston, MA, 2006.
- John Viega and Gary McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, Boston, MA, 2001.
- Karl E. Wiegers. Peer Reviews in Software. Addison-Wesley, Boston, MA, 2002.
