Topics:

All Pages 8021X HOWTO ACP Modem ACPI HOWTO ADSL Bandwidth Man..ATA RAID HOWTO ATM Linux HOWTO AX25 HOWTO Accessibility Dev ..Accessibility HOWTO Adv Bash Scr HOWTO Adv Routing HOWTO Antares RAID sparc..Apache Compile HOWTO Apache WebDAV LDAP..Assembly HOWTO Astronomy HOWTO Athlon Powersaving..Authentication Gat..Autodir HOWTO Aviation HOWTO Avr Microcontrolle..BRIDGE STP HOWTO BTTV BackspaceDelete Bandwidth Limiting..Bangla HOWTO Bash Prompt HOWTO Battery Powered Belarusian HOWTO Belgian HOWTO Beowulf HOWTO Boca BogoMips Bootdisk HOWTO Bridge C++ dlopen C C++Beautifier HO..C editing with VIM..CDROM HOWTO CDServer HOWTO Cable Modem Caudium HOWTO Clone HOWTO Compaq Remote Insi..Compaq T1500 HOWTO Conexant+Rockwell ..Cryptoloop HOWTO DB2 HOWTO DHCP DSL HOWTO DVD Playback HOWTO Debian Binary Pack..Debian Jigdo Debian and Windows..Disk Encryption HO..Disk on Chip HOWTO DocBook Demystific..DocBook Install DocBook OpenJade S..Ecology HOWTO Emacspeak HOWTO Encourage Women Li..Encrypted Root Fil..Euro Char Support Event HOWTO Fedora Multimedia ..Finnish HOWTO Firewall Piercing Flash Memory HOWTO Font HOWTO Framebuffer HOWTO GCC HOWTO GIS GRASS Glibc Install HOWTO HOWTO HOWTO HOWTO INDEX HP HOWTO Handspring Visor Hard Disk Upgrade Hardware HOWTO HighQuality Apps H..Home Electrical Co..IBM7248 HOWTO IO Perf HOWTO IP Alias IP Masquerade HOWTO IRC Implement Sys Call..Indic Fonts HOWTO Infrared HOWTO IngresII HOWTO Install Strategies Installation HOWTO Installfest HOWTO Intkeyb Italian HOWTO Jabber Server Farm..JavaStation HOWTO Kerberos Infrastru..Kernel HOWTO Kerneld Kodak Digitalcam H..LDAP HOWTO LDP Reviewer HOWTO LILO crash rescue ..LVM HOWTO Leased Line Lego Linksys Blue Box R..Linux+Win95 Linux+Win9x+Grub H..Linux+Windows HOWTO Linux Complete Bac..Linux Crash HOWTO Linux Gamers HOWTO Linux Modem Sharing Linux Promise RAID..Linux i386 Boot Co..LinuxGL QuakeWorld..Lotus DominoR5 MILO HOWTO MMBase Inst HOWTO MP3 CD Burning Mail User HOWTO Majordomo MajorCoo..Man Page Masquerading Simpl..Medicine HOWTO MindTerm SSH HOWTO Mobile IPv6 HOWTO Mock Mainframe Module HOWTO Modules Motorola Surfboard..Mozilla Optimization Multi Distro Dev NCURSES Programmin..NFS HOWTO NFS Root Client mi..NIS HOWTO NetMeeting HOWTO Network boot HOWTO Nvidia OpenGL Conf..OLSR IPv6 HOWTO Online Troubleshoo..Oracle 9i Fedora 3..PA RISC Linux Boot..PCTel MicroModem C..PHP Nuke HOWTO PPP HOWTO Pager PalmOS HOWTO Partition Partition Mass Sto..Partition Mass Sto..Partition Rescue Pine Exchange PortSlave Post Installation ..Postfix Cyrus Web ..Pre Installation C..Print2Win Printing HOWTO Process Accounting Program Library HO..Proxy ARP Subnet Qmail ClamAV HOWTO Qmail VMailMgr Cou..Querying libiptc H..RPM HOWTO Reading List HOWTO RedHat CD HOWTO Reliance HOWTO Remote Bridging Remote Serial Cons..SCSI 2.4 HOWTO SCSI Generic HOWTO SLIP PPP Emulator SRM HOWTO SSL Certificates H..Scanner HOWTO Scientific Computi..Scripting GUI TclTk Secure CVS Pserver Secure Programs HO..Security HOWTO Security Quickstar..Security Quickstar..Serial Laplink HOWTO Serial Programming..Slovak HOWTO Small Memory Smart Card HOWTO Software Proj Mgmt..Software Release P..Sound HOWTO Spam Filtering for..Speech Recognition..SquashFS HOWTO Sybase ASA HOWTO Sybase ASE HOWTO Sybase PHP Apache TCP Keepalive HOWTO Tamil Linux HOWTO TimePrecision HOWTO TimeSys Linux Inst..Token Ring Traffic Control HO..Traffic Control tc..UPS HOWTO Unix Hardware Buye..Unix and Internet ..Upgrade Usenet News HOWTO User Authenticatio..VB6 to Tcl VMS to Linux HOWTO VPN HOWTO Valgrind HOWTO VideoLAN HOWTO Vim HOWTO Virtual Web Webcam HOWTO WikiText HOWTO Windows Newsreader..Wireless Link sys ..Wireless Sync HOWTO XDM Xterm XDMCP HOWTO XFree Local multi ..XFree86 HOWTO XFree86 R200 XFree86 Second Mouse XFree86 Video Timi..XML RPC HOWTO XWindow Overview H..XWindow User HOWTO Xinerama HOWTO Xterminals Html single I810 HOWTO Libdc1394 HOWTO OpenMosix HOWTO Phhttpd HOWTO Ppp ssh Text

Secure Programming for Linux and Unix HOWTO
Prev		Next

Chapter 7. Structure Program Internals and Approach

	Like a city whose walls are broken down is a man who lacks self-control. .:: telegra.ph ::. .:: telegra.ph ::.
	Proverbs 25:28 (NIV)

Table of Contents

7.1. Follow Good Software Engineering Principles for Secure Programs

7.2. Secure the Interface

7.3. Separate Data and Control

7.4. Minimize Privileges

7.4.1. Minimize the Privileges Granted
7.4.2. Minimize the Time the Privilege Can Be Used
7.4.3. Minimize the Time the Privilege is Active
7.4.4. Minimize the Modules Granted the Privilege
7.4.5. Consider Using FSUID To Limit Privileges
7.4.6. Consider Using Chroot to Minimize Available Files
7.4.7. Consider Minimizing the Accessible Data
7.4.8. Consider Minimizing the Resources Available

7.5. Minimize the Functionality of a Component

7.6. Avoid Creating Setuid/Setgid Scripts

7.7. Configure Safely and Use Safe Defaults

7.8. Load Initialization Values Safely

7.9. Fail Safe

7.10. Avoid Race Conditions

7.10.1. Sequencing (Non-Atomic) Problems
7.10.2. Locking

7.11. Trust Only Trustworthy Channels

7.12. Set up a Trusted Path

7.13. Use Internal Consistency-Checking Code

7.14. Self-limit Resources

7.15. Prevent Cross-Site (XSS) Malicious Content

7.15.1. Explanation of the Problem
7.15.2. Solutions to Cross-Site Malicious Content

7.16. Foil Semantic Attacks

7.17. Be Careful with Data Types

Prev	Home	Next
Other Languages		Follow Good Software Engineering Principles for Secure Programs .:: www.blogger.com ::. [Web Specs: SciPy] .:: docs.google.com ::. [Haskell Definition] .:: dk.pinterest.com ::.