Dr. Dobb's Security Articles

Dr. Dobb's Archive

Sun, 11 Jan 2015 14:09:00 -0500

On this site is archived all the content from Dr. Dobb's that was published on the Web through December 31, 2014.

5 Steps to Protect Mobile Apps from Attacks

Tue, 25 Nov 2014 06:27:00 -0500

Mobile apps are important gateways to malicious attacks, just like Web apps. It's high time to begin thinking about mobile security as a top development priority. Where to begin?

Jolt Awards: The Best Books

Tue, 23 Sep 2014 12:09:00 -0400

The best books of the past 12 months.

The Internet of Overhyped Things

Tue, 26 Aug 2014 15:28:00 -0400

Vendors and analysts would have us believe that the Internet of Things is imminent. But, in fact, it will be years before the obstacles it faces can be surmounted.

Security Issues in Swift: What the New Language Did Not Fix

Tue, 19 Aug 2014 08:12:00 -0400

The security issues that existed in Objective-C have been only partially addressed in Swift. What to watch out for?

Tooling Up for the Marriage of the Internet of Things, Big Data, and Cloud Computing

Tue, 29 Jul 2014 07:45:00 -0400

Finding tools that will bridge IoT, machine-to-machine, and big data is no simple task. But some integrated solutions are beginning to appear.

Developer Reading List

Tue, 01 Jul 2014 12:02:00 -0400

The best summer reads.

After Heartbleed: A Look at Languages that Support Provability

Tue, 03 Jun 2014 07:24:00 -0400

The open-source SPARK 2014 language can prove that code correctly matches specs. This capability closes off vulnerabilities and illuminates logic errors in code.

The Best of 2013

Tue, 31 Dec 2013 08:21:00 -0500

The most popular articles of the year, sprinkled with a few pieces carefully chosen by the editors.

2013 Developer Salary Survey

Tue, 05 Nov 2013 13:35:00 -0500

Our survey of more than 3,000 developers and managers shows that after several years of being flat, salaries are on the rise once again

The Embarrassing Costs of Not Testing Your Own Code

Tue, 22 Oct 2013 15:14:00 -0400

A recent foul-up at security company Kaspersky shows the high price of letting developers bang out code without testing it.

Secure Development Is Much Easier Than You Think

Mon, 22 Jul 2013 21:26:00 -0400

A handful of techniques, tools, and compiler switches automate secure coding for Windows apps and make it easier to avoid shipping exploits with your software.

Through A PRISM Darkly

Mon, 10 Jun 2013 21:28:00 -0400

The revelation of secret government eavesdropping is likely to substantially reshape companies' understanding of their data's safety.

Keccak: The New SHA-3 Encryption Standard

Tue, 07 May 2013 07:58:00 -0400

After years of testing and analysis, the U.S. government selected the Keccak algorithm to be the new SHA-3 encryption standard. Here is how it works and how to use it.

Prevent Cross-Site Scripting in ASP.NET Web Apps

Tue, 12 Mar 2013 15:51:00 -0400

Cross-site scripting threats can be greatly minimized by proper encoding. On ASP.NET apps, the Microsoft AntiXSS Library is one of the easiest ways to do the encoding correctly.

The Crying Need To Punish Cyber Crime Fairly

Tue, 15 Jan 2013 11:13:00 -0500

Aaron Swartz's suicide is an indictment of the devastating effects of disproportionate punishment.

Malicious Work with the modify-function-return-value Hack

Mon, 12 Nov 2012 08:48:00 -0500

The modify-function-return-value hack is particularly dangerous because it can be used to intercept function calls in code, user libraries, and in runtime libraries. Knowing how it operates is essential to avoiding it.

Deploying Static Analysis

Tue, 07 Aug 2012 09:44:00 -0400

Static analysis is a cheap and easy way to find bugs, but it offers important challenges that tend to be more political than technical.

Anatomy of a Stack Smashing Attack and How GCC Prevents It

Tue, 19 Jun 2012 11:27:00 -0400

The use of special prologues and epilogues around functions can easily detect attacks that rely on stack overflows. Here is how "stack smashing" is actually performed and how its occurrence is detected.

Why Phish Should Not Be Treated as Spam

Fri, 18 May 2012 14:57:00 -0400

Phishing — or the use of highly targeted e-mails to induce users to divulge passwords or use malware — is a problem for all companies. In this invited editorial, security expert Norman Sadeh discusses how phishing needs to be treated separately from spam and spam solutions.

The Best of 2011

Wed, 04 Jan 2012 13:17:00 -0500

The most popular articles of last year from Dr. Dobb's, plus some additional pieces picked out for your thoughtful consideration by our staff

Top Security Threats for 2012

Thu, 15 Dec 2011 07:40:00 -0500

Malware, hacks, break-ins, and other malfeasance FortiGuard Labs predicts we'll have to deal with next year

Testing the Final SHA-3 Hashing Algorithms

Tue, 11 Oct 2011 16:34:00 -0400

Testing the finalists in the competition for a new SHA-3 standard shows generally fast, secure hashing algorithms with few collisions.

Finding the New Encryption Standard, SHA-3

Mon, 03 Oct 2011 16:08:00 -0400

The search for a replacement for SHA-2 has settled on five finalists. We examine their internals and compare their performance.

Jolt Awards for Books: The Rest of the Best

Sun, 04 Sep 2011 11:25:00 -0400