Teaching Secure Programming



Bibliographic Information


Robust programming aims to prevent abnormal termination or unexpected actions and requires code to handle bad (invalid or absurd) inputs in a way that is consistent with the developer’s intent. For example, if an internal error occurs, the program might terminate gracefully rather than simply failing, providing enough information for the programmer to debug the program and avoiding giving the user additional access or information. This article focuses on teaching these principles.

Copyright Notice

The definitive version was published in IEEE Security & Privacy Magazine 3(5), Sep. 2005.