Refactoring for Security


With the Internet era, secured programs are in high demand. However, current systems have many commonly made errors – buffer overflows, improper handle of inputs, etc. – that can cause major security flaws. New vulnerabilities related to these errors are discovered everyday. By simply avoiding these commonly made errors, a system can be much more resilient against attacks. In order to help developers avoid these commonly made errors, the refactoring approach can be applied to secure programming. That is, new refactors will be created to solely focus on transforming the source code to eliminate the commonly made errors. This discipline approach of secure refactoring will enable developers to create much more secured code.

The following presentation provides an greater introduction to this work: Refactoring - an approach to building secure web-based applications\A>