Related
Publications
Ranged
Integers and Saturation Semantics
Robert C. Seacord
CERT/CC
Carnegie Mellon University
January 18th, 2007
Available on-line at: The Art of Software Security Assessment
Integral
Security
Robert C. Seacord
CERT/CC
Carnegie Mellon University
November 3, 2006
Available on-line at: Dr. Dobb's Portal
Secure
Coding in C and C++: Of Strings and
Integers
Robert C. Seacord
CERT/CC
Carnegie Mellon University
IEEE
Security and Privacy, vol. 4, no. 1, pp.
74-76, January/February, 2006.
Validating
C and C++ For Safety and Security
A
structured approach to manual code review
Robert C. Seacord
CERT/CC
Carnegie Mellon University
C/C++
Users Journal, February 2006
Secure
Coding in C and C++: C-Style Strings
Robert C. Seacord
CERT/CC
Carnegie Mellon University
SEI news article 2005
Wide-Character
Format String Vulnerabilities
Strategies for handling format string
weaknesses
Robert C. Seacord
CERT/CC
Carnegie Mellon University
Dr. Dobb's Journal. San Mateo: Dec 2005. Vol. 30,
Iss. 12; p. 63-66.
Secure
Coding in C and C++
An interview with Robert Seacord, senior
vulnerability
analyst at CERT
Ibrahim Haddad
Strategic Program Manager
Open Source Development Labs
Linux World Magazine.
November/December, 2005.
PDF
File [0.23MB]
Managed
String Library for C
Robert C. Seacord
CERT/CC
Carnegie Mellon University
C/C++
Users Journal. Vol. 23, No. 10. Pages 30-34.
October 2005.
Variadic
Functions
How they contribute to security
vulnerabilities and how to
fix them
Robert C. Seacord
CERT/CC
Carnegie Mellon University
Linux World Magazine.
November/December, 2005.
PDF
File [0.18MB]
Information Technology —
Programming
languages, their environments and system software
interfaces
—
Specification
for Managed Strings —
Dr. Fred Long
Department of Computer Science
University of Wales, Aberystwyth
Robert C. Seacord
CERT/CC
Carnegie Mellon University
ISO/IEC C
- Document register: Pre Mt. Tremblant mailing
A Structured
Approach to Classifying Security
Vulnerabilities
Robert C. Seacord
Allen Householder
Technical Note
CMU/SEI-2005-TN-003
PDF [0.57MB]
More to come...
|