Code Craft

In a Nutshell

Security is a kind of death.

—Tennessee Williams

Programming is war.

Security is a real issue in modern software development; you can’t stick your head in the sand and hide from it. Ostriches write poor code. We can prevent most security breaches by better design, better system architecture, and greater awareness of the problems. The benefits of a secure system are compelling, since the risks are so serious.

Good programmers . . .	Bad programmers . . .
Understand the security requirements for each project they work on Instinctively write code that avoids common security vulnerabilities Design security into each system; they don’t patch it in at the end Have a security test strategy	Dismiss security as an unimportant concern Consider ...