Introduction

What is secure programming?

• Subset of "correct programming" dealing with user interaction with
  the program and prevention of certain bugs that allow users do "do
  things you don't want them to do"

• Ensuring your program does what it should and only what it should

• Security-related bugs:
  • Unauthorized access or privileges (UR r00ted, d00dz!)

  • Access to unauthorized data

  • Denial of service

What it isn't

• It's not your average bug. Just because your web page is off center, it doesn't indicate a threat.