5 ms·
Ask HN: What are the fundamental “must read” papers on software security
Here's a few to kick it off:
Ken Thompson - Reflections on Trusting Trust (1984):
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf
Whitfield Diffie and Martin E. Hellman - New Directions in Cryptography (1976):
https://www.cs.utexas.edu/~shmat/courses/cs380s/dh.pdf (not strictly software security but still a fantastic & important read)
Dan Bernstein - Some thoughts on security after ten years of qmail 1.0 (2007):
https://cr.yp.to/qmail/qmailsec-20071101.pdf
- mardiyah 6y agoBug-Hunters-Diary-Software-Security/ https://www.amazon.com/Bug-Hunters-Diary-Software-Security/dp/1593273851 https://www.amazon.com/Bug-Hunters-Diary-Software-Security/d... List: https://heimdalsecurity.com/blog/best-cyber-security-books/ https://heimdalsecurity.com/blog/best-cyber-security-books/
- joshxyz 6y agoNot a paper but a blog, anyone know sites like https://latacora.micro.blog/ https://latacora.micro.blog/?
- petra 6y agoThe LangSec papers(lenguage based security, Meredith Peterson ?).