Secure programmer: Keep an eye on inputs (IBM developerWorks)

[Posted January 5, 2004 by ris]

David A. Wheeler continues his series on secure programming with a look at inputs. "This article discusses various ways data gets into your program, emphasizing how to deal appropriately with them; you might not even know about them all! It first discusses how to design your program to limit the ways data can get into your program, and how your design influences what is an input. It then discusses various input channels and what to do about them, including environment variables, files, file descriptors, the command line, the graphical user interface (GUI), network data, and miscellaneous inputs."

(Log in to post comments)