Re: malicious code

I'm not looking for technology. It is going to be a very long time before software can even find unintentional security errors. I was hoping that someone had done some research on how human code review can find malicious logic. Is the problem exactly the same as searching for inadvertent security flaws, or are there specialized techniques for searching out malicious logic.

Thanks for any thoughts on this topic!

> David Wagner wrote
>
> Jeff Williams wrote:
code"
> >as opposed to simply inadvertent security screwups? Seems to me that
the
> >best attacks would be very difficult to distinguish from a ordinary
> >mistake.
Received on Mon Jan 27 22:28:40 2003