I.N.S.E.C.U.R.E

I am becoming more and more interested in the (ISC)2 Certification called CSSLP: Certified Secure Software Lifecycle Professional

They have a whitepaper for this certification called “Code (In)Security” written by Mano Paul.
I am not allowed to publish the direct link because they request registration before giving the link to the whitepaper. In order to register (gratis), go to this link: http://www.isc2.org/wpv

There is something interesting in this whitepaper: the acronym I.N.S.E.C.U.R.E :
I – Injectable code
N – Non repudiation Mechanisms not present
S – Spoofable code
E – Exception and Errors not Properly handled
C – Cryptographically Weak Code
U – Usafe/Unsecure Functions and Routines in Code
R – Reversible code
E – Elevated Privileges Required to Run

I can’t copy paste what each of these mean, but do please, read the paper 😉


© Copyright 2010 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity


Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.

Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch

Related Posts

Network Access Control and IoT Security

Network Access Control,  is an approach to computer security that attempts to unify endpoint security technology (such as antivirus, host intrusion prevention, and vulnerability assessment), user or system authentication and network security enforcement. When a computer connects to a computer network, it is not permitted to access anything unless it complies with a business defined […]

What you need to know about the OpenSSL vulnerability “heartbleed”

At the beginning of this week a new vulnerability in OpenSSL called Heartbleed was made public. OpenSSL is the library used by most computers to encrypt data sent across the Internet and not only. OpenSSL is perhaps the most widely deployed SSL library and appears in a wide variety of applications, including a number of Linux distributions (see […]