Re: [SC-L] market for training CISSPs how to code (Matt Parsons)

2010-03-18 Thread Craig E. Ward
On Wed, Mar 17, 2010 at 6:17 PM, ljknews wrote: > At 7:27 PM +0200 3/17/10, AK wrote: > >> Regarding training non-developers to write secure code, what are  the >> circumstances that a non-developer would create code that would >> *require* security? I am assuming that system administrators know t

Re: [SC-L] Programming language comparison?

2008-02-05 Thread Craig E. Ward
My final paper for my masters degree was on how some vulnerabilities manifest themselves, or fail to manifest, in different programming languages. I included C, C++, Java, Perl, and Standard ML. The title of the paper is "Implications of Programming Language Selection On the Construction of Sec

Re: [SC-L] re-writing college books [was: Re: A banner year for software bugs | Tech News on ZDNet]

2006-10-15 Thread Craig E. Ward
At 9:02 PM +1000 10/13/06, mikeiscool wrote: >On 10/13/06, Craig E. Ward <[EMAIL PROTECTED]> wrote: >>At 10:03 AM -0400 10/12/06, ljknews wrote: >>>At 9:20 AM -0400 10/12/06, Robert C. Seacord wrote: >>> >>>> I'm also teaching a course at CM

Re: [SC-L] re-writing college books [was: Re: A banner year for software bugs | Tech News on ZDNet]

2006-10-13 Thread Craig E. Ward
At 10:03 AM -0400 10/12/06, ljknews wrote: >At 9:20 AM -0400 10/12/06, Robert C. Seacord wrote: > >> I'm also teaching a course at CMU in the spring on Secure Coding in C >> and C++. > >Is there participation on this list from the (hopefully larger number of) >CMU instructors who are teaching peo

Re: [SC-L] Programming languages -- the "third rail" of secure coding

2004-07-22 Thread Craig E. Ward
At 1:22 AM -0700 7/21/04, Crispin Cowan wrote: I don't understand the purpose of this list. If it is to list all programming languages, that is hopeless, as there are thousands of programming languages. If it is to list all programming languages with security ambitions, then I'm confused, as cle