Secure coding

Command Injection Vulnerabilities

Command Injection Vulnerabilities

What is a command injection vulnerability? Many applications are not designed to be wholly self-contained. They often access external systems as well, includ

Format String Vulnerabilities

Format String Vulnerabilities

C++ and strings The C++ programming language has a couple of different variable types designed to manage text data. These include C strings, which are define

What Is Secure Coding?

What Is Secure Coding?

A Lack Of Security Training Contributes To Growing Vulnerability Numbers The number of vulnerabilities that exist in production software is growing rapidly.

Logical instructions in x86

This article defines logical instructions as executed by x86 processors. It goes on to describe four key classifications of logical instructions in brief.

Integer overflow and underflow vulnerabilities

Integer overflow and underflow vulnerabilities

Integer overflow and underflow vulnerabilities are considered the eighth most dangerous vulnerability in the Common Weakness Enumeration (CWE) Top 25 List of

Race condition vulnerabilities

Race condition vulnerabilities are an artifact of parallel processing. The ability to run multiple different execution threads in parallel can create vulnera

Buffer Overflow Vulnerabilities

Buffer Overflow Vulnerabilities

Introduction to buffer overflows Buffer overflows are considered the most dangerous vulnerability according to the CWE Top 25 list in 2019. They received a s

Conditionals and jump instructions in x86

This article will briefly discuss conditionals and jump instructions. Conditionals are commonly used in assembly for comparison so that other instructions ca

Least Privilege Vulnerabilities

Least Privilege Vulnerabilities

Introduction The principle of least privilege is an essential component of information assurance and security activities. According to the National Institute

Understanding for and while loops in assembly

In the previous article, we discussed how if statements can be spotted in the disassembly of a binary. We learned that if conditions are translated to condit