Top 25 Most Dangerous Programming Errors

Replies to This Discussion

Permalink Reply by Brooke Fujita on January 12, 2009 at 7:42pm

Here's the PDF.

Attachments:

• 2009_cwe_sans_top_25.pdf, 308 KB

• ▶ Reply

Permalink Reply by Ben Ward on January 13, 2009 at 4:25pm

I saw this as well.
Thanks for the posting it here.

• ▶ Reply

Permalink Reply by Daniel Leuck on January 13, 2009 at 6:35pm

Hey Brooke. Its good to see you on TechHui again. This is a great list! Thanks for posting.

CWE-119: Failure to Constrain Operations within the Bounds of a Memory Buffer

With a few exceptions (OS development, drivers, embedded systems, VMs, etc.) I would say "get a new language" :-)

• ▶ Reply

Permalink Reply by Brooke Fujita on January 18, 2009 at 4:15pm

And just to leaven this with grain of salt, a reminder from security author Gary McGraw on the Top 11 Reasons Why Top 10 (or Top 25) Lists Don't Work.

It is always good to have balance.

• ▶ Reply

▶ Reply to Discussion