Software Security : Bringing Heightened Awareness to Secure Coding

Abstract

The goal of this paper is to bring awareness to the concept and process behind software security. We will look at the importance of having secure code, why developers and companies need secure code and why they would not put this on high priority. The paper presents four security threats that are very common, gives examples of them, and provides ways to prevent them. It then looks at the idea of security specific code reviews, exploiting the web application WebGoat, and how to incorporate secure coding into the development cycle.