Technology
The Art of Software Security Assessment
Mark Dowd, John McDonald, Justin Schuh
7 min read 4 key ideasPremium
How professional auditors read code for security bugs: the vulnerability classes, the review methodology, and detailed analysis of C/C++ and network-facing code.
A deep manual on finding vulnerabilities through code review, covering memory corruption, integer issues, injection, and protocol-level flaws, with methodology for auditing large codebases.
Key takeaways
Full access members only
Unlock full accessAction checklist
Full access members only
Unlock full accessFinal takeaway
Full access members only
Unlock full access
