Fix it - don't nix it [C security]

Access Full Text

Fix it - don't nix it [C security]

For access to this article, please select a purchase option:

Buy article PDF
£12.50
(plus tax if applicable)
Buy Knowledge Pack
10 articles for £75.00
(plus taxes if applicable)

IET members benefit from discounts to all IET publications and free access to E&T Magazine. If you are an IET member, log in to your account and the discounts will automatically be applied.

Learn more about IET membership 

Recommend Title Publication to library

You must fill out fields marked with: *

Librarian details
Name:*
Email:*
Your details
Name:*
Email:*
Department:*
Why are you recommending this title?
Select reason:
 
 
 
 
 
Engineering & Technology — Recommend this title to your library

Thank you

Your recommendation has been sent to your librarian.

The article discusses the security in C programming language. Critics claim that the decades-old C programming language is inherently insecure. The author disagrees. Programmers just have to use security tools to fix software vulnerabilities.Research in recent years has identified the root cause of many of the vulnerabilities typically found in C/C++ code. Coding standards such as the CERT C Secure Coding Standard help programmers avoid the associated pitfalls. However, without automated tools to check for non-compliance, it is, arguably, more or less impossible for a programmer to deliver fault-free code. Software analysis tools for static code analysis are available to enforce compliance with the guidelines recommended by these established coding standards. They can perform in-depth, systemwide analysis of the code, and can utilise formal methods to ensure that system security is not compromised. Software tools enforce compliance with the guidelines recommended by established coding standards.

Inspec keywords: security of data; formal specification; codes; C++ language

Other keywords: system security; C programming language; CERT C secure coding standard; C/C++ code; formal methods; static code analysis; software analysis tools

Subjects: High level languages; Formal methods; Data security

http://iet.metastore.ingenta.com/content/journals/10.1049/et.2009.1811
Loading

Related content

content/journals/10.1049/et.2009.1811
pub_keyword,iet_inspecKeyword,pub_concept
6
6
Loading