Talk With an Expert

Securely Programming in C

Securely Programming in C (PDF, 2.19MB)Published: 24 Sep, 2002
Created by
Sayed Ahmed

This paper will discuss what I feel are the main issues in secure programming in the C programming language in a UNIX environment (Buffer Overflows, Format Strings and Race Conditions), topics such as overflows are relevant in Windows too. The issues will be described so that the reader can understand the nature of the vulnerability. The mechanisms of the exploit will also be described where they have not been sufficiently covered in other papers. After discussing these vulnerabilities secure programming tips and automated tools are described.