OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: K K Mookhey (cto_at_nii.co.in)
Date: Fri Dec 27 2002 - 21:36:33 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Do check out
    http://www.dwheeler.com/secure-programs/
    Although for Linux and Unix most of the principles apply to Windows as well.
    There are books on the subject too.

    > And one more thing...<this one might be intresting ;-)> Is it possible
    > to write code that is completely secure and not exploitable?
    >
    NO. First up, assuming you manage to plug in all the existing
    vulnerabilities (and that is a big assumption in itself), you can never
    guarantee security of code from a whole new as-yet-undiscovered class of
    vulnerabilities. This is like asking, can I have a 100% secure hack-proof
    server/network/firewall. One can only raise the barrier higher and get the
    percentages on your side.

    HTH

    K. K. Mookhey
    Chief Technology Officer
    Network Intelligence India Pvt. Ltd.
    Email: ctonii.co.in
    Web: www.nii.co.in
    Tel: 91-22-22001530/22006019
    =============================
    The Unix Auditor's Practical Handbook
    http://www.nii.co.in/tuaph.html
    =============================