CHAPTER 12

Common Software Vulnerabilities and Countermeasures

In this chapter you will

•   Learn about common known software vulnerabilities and mitigations

•   Explore the SANS top 25 list of vulnerabilities

•   Examine the OWASP list of web application vulnerabilities

•   Examine the concepts of enumerated weaknesses (CWE) and vulnerabilities (CVE)

The errors associated with software fall into a series of categories. Understanding the common categories of vulnerabilities and learning how to avoid these known vulnerabilities have been proven to be among the more powerful tools a development team can use in developing more secure code. While attacking the common causes will not remove all vulnerabilities, it will go a long way toward improving ...

Get CSSLP Certification All-in-One Exam Guide, Second Edition, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.