Re: Inspecting Code for Security

[email protected] wrote:

> I have a background in programming and code inspection. However our
> inspections were not targeted at security, instead they looked for
> logic errors, over complex code, missing comments, etc.
> 
> With security in mind what things other things should I be looking
> for in a code inspection? 

Well, you'll want to read "Secure Programming for Linux and Unix HOWTO" 
by David A. Wheeler, available at <http://www.dwheeler.com/secure-programs/>

Although it has "Linux" and "Unix" in its name, I find it very helpful 
to get a feeling about potential problems that might strike you on other 
platforms.

j.