Answers.Body: <p><a href="https://dwheeler.com" rel="nofollow noreferrer">David A. Wheeler</a> has a collection of essays, including several on software security (particularly targeting Unix/Linux).</p>
  <p>There are lots of tools around, including sophisticated checkers that are build on LLVM, like <a href="http://klee.llvm.org" rel="nofollow noreferrer">klee</a>. You'll also find discussions like <a href="https://spectralops.io/blog/top-12-open-source-code-security-tools" rel="nofollow noreferrer">&quot;Top 12 Open Source Security Tools&quot;</a> with a bit of searching.</p>
  <p>There are lots of standards, look e.g. at <a href="https://www.kiuwan.com/security-standards-in-software-development" rel="nofollow noreferrer">&quot;Security Standards in Software Development&quot;</a>.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2021-10-13T10:12:39.937Z
Answers.LastActivityDate: 2021-10-13T10:12:39.937Z
Answers.UserDisplayName: vonbrand
Body: <p>I have been asked so be the second on grading a paper a Student is going to write about &quot;Creating a methodology for ensuring Code Security/Authenticity&quot;. Sadly this is not my field of expertise.</p>
  <p>Now I'm looking for some basic information about methods or software that already exists, so I can get a baseline understanding of the Topic.
  These are the Questions that are currently on my mind:</p>
  <ul>
  <li>Is there already an established best practices?</li>
  <li>What are commonly used Methods?</li>
  <li>What are the most important points when looking at Code Security?</li>
  </ul>
  <p>The student will hopefully provide some basics in his paper but I would hate to go into this blind  just to be fair to the student.
  I would be grateful if anyone could point me toward  any good introductory material?</p>
  
Tags: <resource-request><undergraduate><resource-information>
Title: Sources on the Topic Source Code Security/Authenticity
ThreadText: # Sources on the Topic Source Code Security/Authenticity
  
  (Asked by: username_0 on 2021-10-13)
  
  I have been asked so be the second on grading a paper a Student is going to write about "Creating a methodology for ensuring Code Security/Authenticity". Sadly this is not my field of expertise.
  
  Now I'm looking for some basic information about methods or software that already exists, so I can get a baseline understanding of the Topic.
  These are the Questions that are currently on my mind:
  
  * Is there already an established best practices?
  * What are commonly used Methods?
  * What are the most important points when looking at Code Security?
  
  The student will hopefully provide some basics in his paper but I would hate to go into this blind just to be fair to the student.
  I would be grateful if anyone could point me toward any good introductory material?
  
  **Tags:** resource-request, undergraduate, resource-information
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2021-10-13. Score: 2 | Accepted answer
  
  [David A. Wheeler](https://dwheeler.com) has a collection of essays, including several on software security (particularly targeting Unix/Linux).
  
  There are lots of tools around, including sophisticated checkers that are build on LLVM, like [klee](http://klee.llvm.org). You'll also find discussions like ["Top 12 Open Source Security Tools"](https://spectralops.io/blog/top-12-open-source-code-security-tools) with a bit of searching.
  
  There are lots of standards, look e.g. at ["Security Standards in Software Development"](https://www.kiuwan.com/security-standards-in-software-development).
  
  
  ---
  
  