Application Security

Application Security describes the fundamental technical skills required to identify and prevent application vulnerabilities.

• http://en.wikipedia.org/wiki/Application_security

Introduction

• http://pentest.cryptocity.net/appsec-readings/

Sandboxes

• The Apple Sandbox

Research

• Native Client: A Sandbox for Portable, Untrusted x86 Native Code
• Some thoughts on security after ten years of qmail 1.0
• Low-level Software Security by Example
• Exploiting Concurrency Vulnerabilities in System Call Wrappers
• Null Prefix Attacks Against SSL/TLS Certificates
• A Bounds Check on the Microsoft Exploitability Index
• Beware of Finer-Grained Origins
• Thirty Years Later: Lessons from the Multics Security Evaluation
• Improving Host Security with System Call Policies

Projects

• Native Client