[ Thanks to Toms
Harda for this link. ]
“This article is a first in series that deal with secure
programming and related issues. Before we begin though, let’s first
define secure programming. A “secure program” is an application
that sits on a security boundary, taking input from a source that
does not have the same access rights as the program. Such programs
include application programs used as viewers of remote data, web
applications (including CGI scripts), network servers, and
setuid/setgid programs…”