走马观花

http://wiki.developerforce.com/page/Secure_Coding_GuidelineSecure Coding GuidelinesThe following documentation walks you through the most common security issues salesforce.com has identified whi

http://en.wikipedia.org/wiki/Time_of_check_to_time_of_useIn software development, time of check to time of use (TOCTTOU orTOCTOU, pronounced "TOCK too") is a class of software bug caused by ch

http://www.javacodegeeks.com/2012/12/test-using-cryptography-in-java-applications.htmlThis post describes how to use the Java Cryptography Architecture (JCA) that allows you to use cryptographic s

http://www.cnvd.org.cn/publish/main/78/2012/20120924161917256776912/20120924161917256776912_.html一、SQL注入漏洞         SQL注入攻击（SQL Injection），简称注入攻击、SQL注入，被广泛用于非法获取网站控制权，是发生在应用程序的数据库层上的安全漏洞。在设计程序，忽略

http://msdn.microsoft.com/en-us/magazine/ee335713.aspxXML Denial of Service Attacks and DefensesBryan SullivanDenial of service (DoS) attacks are among the oldest types of attacks against Web si

https://blogs.oracle.com/swchan/entry/follow_up_on_servlet_3 By Shing Wai Chan on Oct 29, 2009In May 2009, I discussed the Servlet 3.0 security annotations in one of my blogs,Servlet 3.0 S

http://www.cnblogs.com/hyddd/archive/2009/02/23/1396790.html hyddd原创，转载请说明。　　上次介绍了用FindBugs辅助分析代码漏洞，这次换了一个工具：Fortify SCA Demo 4.0.0。Fortify是一个在安全方面挺出名的公司，这里就不多说了。先介绍一下主角：Fortify SCA Demo 4.0.0，虽

http://blog.csdn.net/m13666368773/article/details/7472201重构，其实很简单，它的目的就是让程序变得更容易被理解，更具有可维护性，结构更合理。重构应该是我们平时写代码过程中必不可少的一部分，比如给函数起了一个更好的名字、把大函数拆分成几个小函数等都属于重构。重构的经典书籍包括Martin Flower的《重构-改善既有代码的设计》、Josh

http://blog.csdn.net/hunterno4/article/details/11687269Sonar简介Sonar是一个用于代码质量管理的开源平台，用于管理源代码的质量，可以从七个维度检测代码质量通过插件形式，可以支持包括java,C#,C/C++,PL/SQL,Cobol,JavaScrip,Groovy等等二十几种编程语言的代码质量管理与检测sona