In Chapter 7 we discussed the role of secure coding guidelines in ensuring that applications are secure. In this chapter we look at some of the most important guidelines developers should follow; for a comprehensive look at the topic, the OWASP Secure Coding Practices Guide is recommended.50 Since many of these are low-level code writing requirements, we illustrate the guidelines with code snippets. As the coding guidelines are platform-agnostic and apply to all popular platforms, we show code snippets only for one platform, .NET. The examples we show with .NET can be ported to J2EE, PHP, Perl and other platforms, too.

We classify the coding guidelines into seven categories:

  1. Input validation guidelines ...

Get Application Security in the ISO 27001:2013 Environment now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.