Top 25 Most Dangerous Programming Errors

Mitre, via its Common Weakness Enumeration effort, in conjunction with SANS, just published the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors. Heading the list are:

1. Cross-site Scripting (Score = 346)
2. SQL Injection (330)
3. Classic Buffer Overflow (273)
4. Cross-Site Request Forgery (261)
5. Improper Access Control (219)

For each weakness this report provides a Description, Prevention and Mitigation techniques, and links to more reference material. This is well worth reading.

Comments

[Carl]

I was very excited to read this until I realized it was in PSD format. Yuck!

[riskpundit]

Carl,

First, the format of the document is PDF. Second, I dont feel I have the right to convert it. Third, I will email it to you privately. If you have a Gmail account, they will convert it for you automatically.

Bill