Defensive Programming 1st Core Principle
Our first defensive programming core principle addresses a major design flaw in many programs. Let's first formalise the problem into a number of anti patterns, then learn how to systematically address them.
Topics
Anti patterns
By far, the majority of security attacks are resulted from trusting an untrusted data. The following anti-patterns can result into this issue.
Principle
We explore "Parse Untrusted Input" by first discussing what parsing is, the difference between parsing and validation, and safety checks that a parser must implement.
Void Safety
First data safety property that a secure parser must implement.
Range Safety
Second data safety property that a secure parser must implement.
Character Set Safety
Third data safety property that a secure parser must implement.
Format Safety
Fourth data safety property that a secure parser must implement.
Semantic Safety
Fifth data safety property that a secure parser must implement.