Research

Reading Code the Way an Attacker Would: An Introduction to Security Auditing and Program Analysis

Reviewing code for correctness and reviewing it for security are different jobs. The first asks what the program does with the input it expects. The second asks what it does with input chosen by someone who wants it to fail. “Peek-a-boo.” Every non-trivial program spends much of its l …

Read Story

Subscribe by email