From the ground up: The DIMACS software security workshop

IEEE Security and Privacy

Volumn 1, Issue 2, 2003, Pages 59-66

  McGraw, Gary ^a  

^a Cigital ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY ENGINEERING; SECURITY-RELATED SOFTWARE VULNERABILITIES; SOFTWARE DEFECTS;

COMPUTER ARCHITECTURE; COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; COMPUTER PROGRAMMING LANGUAGES; DATA PRIVACY; KNOWLEDGE BASED SYSTEMS; RISK MANAGEMENT; SOFTWARE ENGINEERING;

SECURITY OF DATA;

EID: 2342581753     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSECP.2003.1193213     Document Type: Conference Paper

References (7)

1. D. Wagner et al., "A First Step Towards Automated Detection of Buffer Over-Run Vulnerabilities," Proc. Seventh Network and Dist. Sys. Security Symp. (NDSS), 2000.
2. R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, John Wiley & Sons, 2001.
3. J. Viega and G. McGraw, Building Secure Software. Addison-Wesley, 2001; www.buildingsecuresoftware.com.
4. M. Howard and D. LeBlanc, Writing Secure Code, Microsoft Press, 2001.
5. G. McGraw and G. Morrisett, "Attacking Malicious Code: A Report to the Infosec Research Council," IEEE Software, vol. 17, Sept./Oct., 2000, pp. 33-41.
6. G. McGraw and E. Felten, Securing Java: Getting Down to Business with Mobile Code, John Wiley & Sons, 1999; www.securingjava.com.
7. W. R. Bush, J. D. Pincus, and D. J. Sielaff, "A Static Analyzer for Finding Dynamic Programming Errors," Software Practice and Experience, vol. 30, June 2000.