September 2009
Intermediate to advanced
464 pages
9h 58m
English
book
24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
by Michael Howard, David LeBlanc, John Viega
Content preview from 24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
SIN 17FAILURE TO PROTECT STORED DATA
OVERVIEW OF THE SIN
Sensitive data must be protected when the data is at rest. In many cases, it’s the law! We touched on a variant of this issue in Sin 12, which dealt mostly with accidental leakage of data through application error messages and various side-channels. This chapter will look mostly at how to protect data at rest so that it cannot be accessed, accidentally or maliciously, by other than authorized parties.
Unfortunately, software designers often worry more about protecting information in transit than protecting the information while it is on disk, but the information spends more time stored on the system than it does in transit. There are a number of aspects you need to consider when storing ...