Technical Tag

Principles and Practice of Code Auditing

2 related articles.

Code Auditing in Theory and Practice: SQL, Part 1

I. Preface A year of graduate-exam preparation is finally over. It did not follow my original plan, but I made it through. With time available, I am writing the code-auditing principles and practice series I had long planned. It explains web-vulnerability principles through CVE cases, including SQL injection, XSS, upload, and code-execution issues. Because it is long, it will be split into a series. These are personal study notes; corrections are welcome…