没错，你得去死磕像《Writing Secure Code》https://www.amazon.com/Writing-Secure-Second-Developer-Pract... 《Secure Programming Cookbook for C and C++》http://shop.oreilly.com/product/9780596003944.do 以及《SEI CERT C Coding Standard》https://wiki.sei.cmu.edu/confluence/display/c 这些书。
Yes, you need to dive into books like Writing Secure Code https://www.amazon.com/Writing-Secure-Second-Developer-Pract... Secure Programming Cookbook for C and C++ http://shop.oreilly.com/product/9780596003944.do SEI CERT C Coding Standard https://wiki.sei.cmu.edu/confluence/display/c
……讲了微软产品过去有哪些缺陷、常见的安全 bug 是什么以及如何排查。我记得讲座是 Michael Howard 主讲的。讲得特别棒。然后我们人手发了一本《Writing Secure Code》来读。书里把所有已知的安全漏洞类型都列了出来，并教我们怎么修复。它还教我们怎么写 threat model、怎么验证来自不可信来源的输入、怎么缩小我们的……
…where Microsoft products had failings, what were common security bugs and how to look for them. I think the presentations were done my Michael Howard. They were very good. Then we were given a copy of Writing Secure Code to read. It enumerated all of the know types of security vulnerabilities and told us how to fix them. It also taught us how to write a threat model, validate input from untrusted sources, reduce our…
Ask HN：我今天随手翻了翻同事的一本书——David LeBlanc 和 Michael Howard 写的《Writing Secure Code》。我直奔讲 buffer overruns 的那一章，因为我一直听说这是安全问题的重灾区，但从来不知道为什么。翻开之后我大为震惊，而且……
Ask HN: I picked up a coworker's book today - Writing Secure Code by David LeBlanc and Michael Howard. I immediately went to a chapter on buffer overruns because I've always heard this is a major source for security issues, but never knew why. I was surprised and…
没错，你得去死磕像《Writing Secure Code》https://www.amazon.com/Writing-Secure-Second-Developer-Pract... 《Secure Programming Cookbook for C and C++》http://shop.oreilly.com/product/9780596003944.do 以及《SEI CERT C Coding Standard》https://wiki.sei.cmu.edu/confluence/display/c 这些书。
Yes, you need to dive into books like Writing Secure Code https://www.amazon.com/Writing-Secure-Second-Developer-Pract... Secure Programming Cookbook for C and C++ http://shop.oreilly.com/product/9780596003944.do SEI CERT C Coding Standard https://wiki.sei.cmu.edu/confluence/display/c
……讲了微软产品过去有哪些缺陷、常见的安全 bug 是什么以及如何排查。我记得讲座是 Michael Howard 主讲的。讲得特别棒。然后我们人手发了一本《Writing Secure Code》来读。书里把所有已知的安全漏洞类型都列了出来，并教我们怎么修复。它还教我们怎么写 threat model、怎么验证来自不可信来源的输入、怎么缩小我们的……
…where Microsoft products had failings, what were common security bugs and how to look for them. I think the presentations were done my Michael Howard. They were very good. Then we were given a copy of Writing Secure Code to read. It enumerated all of the know types of security vulnerabilities and told us how to fix them. It also taught us how to write a threat model, validate input from untrusted sources, reduce our…
Ask HN：我今天随手翻了翻同事的一本书——David LeBlanc 和 Michael Howard 写的《Writing Secure Code》。我直奔讲 buffer overruns 的那一章，因为我一直听说这是安全问题的重灾区，但从来不知道为什么。翻开之后我大为震惊，而且……
Ask HN: I picked up a coworker's book today - Writing Secure Code by David LeBlanc and Michael Howard. I immediately went to a chapter on buffer overruns because I've always heard this is a major source for security issues, but never knew why. I was surprised and…