How truthful CWE/SANS TOP 25 Most Dangerous Programming Errors are?
Recently experts from more than 30 US and international cyber security organizations announced the consensus list of the Top 25 programming errors that lead to security bugs and that enable cyber espionage and cyber crime. Most of these errors are not well understood and accepted by programmers; their avoidance is not widely taught by computer science programs; and their presence is frequently not tested by organizations developing software for sale. The impact of these errors is a tremendous. Just two of them led to more than 1.5 million web site security breaches during 2008 – and those breaches infected the computers of people who visited those web sites, turning their computers into zombies.
