Re: Strategies for teaching secure coding practices

[Brian Chess <brian () fortifysoftware com>]

David Crocker wrote:

> An alternative way is to *prove* that all inputs are within bounds ... This
> approach is more or less impossible to apply if you are coding in C or C++.
> It may be feasible if you are using Java (using tools such as ESC/Java) ...

Funny you should mention that.  My dissertation focused on showing that you
can apply Extended Static Checking to the problem of finding some common
types of security vulnerabilities in real C programs.  (Common types of
security vulnerabilities being things like buffer overflow, race conditions,
and format string vulnerabilities.)

More info if you're interested: http://sctest.cse.ucsc.edu/chess/EauClaire

Brian