The top 10 is for web site vulnerabilities, but the concepts apply to all types of apps. In my personal opinion, you really can't do better for a starting point when it comes to learning about secure coding.
This site provides best practices, tools, and really makes everything understandable regardless of your skill level.
*Added *
Another good resource is the MSDN documentation, since your question is tagged as C#.
最后，进入其中：连接到有关应用程序安全性的常规输入，查找博客，阅读新闻（使用一些漏洞名称或单词（例如“应用程序安全”或“安全开发”）构建 Google 警报），然后看看会发生什么。
希望有帮助。
sb
PS：抱歉“google”链接，我是新用户，只能在我的答案中发布 1 个网址:(
I guess starting with secure development would mean three steps:
Identify and understand the big picture: what may go wrong
This means understanding the technical aspects of a vulnerability and how it helps making things go wrong.
Typically, I'd go with the OWASP's Top 10 web application security vulnerabilities (google: owasp top 10 2007).
If you don't understand it, then, please, ask for guidance. Understanding such a document doesn't directly tells you how to build secure code but it is a good indicator on your level of understanding on secure development.
Find good general practices that lead to secure development
While many documents tell you how things may go wrong, few resources actually tell you how to avoid them in a general way.
Currently, I'd mostly recommend these resources:
David Rook's "Secure Development principles" (google: david rook principles of secure development)
OWASP's Top 10 vulnerabilities protection section pages (each entry is clickable on the online version of the Top 10)
Find resources tailored for your technology
Get access to resources that tell you "how to do this" in a language that you speak. Typically, C#. The MSDN portal provides developers with many security checklists (http://msdn.microsoft.com/en-us/library/ms998408.aspx).
Finally, get into it: connect to regular input on application security, find blogs, read news (build Google alerts with some vulnerabilities names or words such as 'application security' or 'secure development') and see what happens.
Hope it helps.
sb
PS: sorry for the 'google' links, I am a new user and can only post 1 url in my answers :(
发布评论
评论（3）
我找到的最好的资源在这里：
http://www.owasp.org/index.html
在该站点中，我将从这里开始：
http://www.php/Main_Page owasp.org/index.php/Top_10_2007
前 10 个漏洞针对网站漏洞，但这些概念适用于所有类型的应用程序。在我个人看来，在学习安全编码方面，你确实没有比这更好的起点了。
该网站提供最佳实践、工具，并且无论您的技能水平如何，一切都可以真正理解。
*已添加*
另一个好的资源是 MSDN 文档，因为您的问题被标记为 C#。
http://msdn.microsoft.com/en-us/library/ms998408。 ASPX
The best resource I've found is here:
http://www.owasp.org/index.php/Main_Page
Within that site, I would start here:
http://www.owasp.org/index.php/Top_10_2007
The top 10 is for web site vulnerabilities, but the concepts apply to all types of apps. In my personal opinion, you really can't do better for a starting point when it comes to learning about secure coding.
This site provides best practices, tools, and really makes everything understandable regardless of your skill level.
*Added *
Another good resource is the MSDN documentation, since your question is tagged as C#.
http://msdn.microsoft.com/en-us/library/ms998408.aspx
请尝试 MSDN 上的以下文章：安全性（如何使用 C#）。
Try the following article on MSDN: Security (How Do I in C#).
我想从安全开发开始意味着三个步骤：
识别并了解大局：可能会出现什么问题
这意味着了解漏洞的技术方面以及它如何导致问题发生。
通常，我会选择 OWASP 的十大 Web 应用程序安全漏洞（google：owasp top 10 2007）。
如果您不明白，请寻求指导。理解这样的文档并不直接告诉您如何构建安全代码，但它可以很好地表明您对安全开发的理解程度。
找到实现安全开发的良好通用实践
虽然许多文档告诉您事情可能会如何出错，但很少有资源真正告诉您如何以通用方式避免它们。
目前，我主要推荐这些资源：
查找适合您的技术的资源
访问以您所使用的语言告诉您“如何执行此操作”的资源。通常，C#。 MSDN 门户为开发人员提供了许多安全检查表 (http://msdn.microsoft.com)。 com/en-us/library/ms998408.aspx）。
最后，进入其中：连接到有关应用程序安全性的常规输入，查找博客，阅读新闻（使用一些漏洞名称或单词（例如“应用程序安全”或“安全开发”）构建 Google 警报），然后看看会发生什么。
希望有帮助。
sb
PS：抱歉“google”链接，我是新用户，只能在我的答案中发布 1 个网址:(
I guess starting with secure development would mean three steps:
Identify and understand the big picture: what may go wrong
This means understanding the technical aspects of a vulnerability and how it helps making things go wrong.
Typically, I'd go with the OWASP's Top 10 web application security vulnerabilities (google: owasp top 10 2007).
If you don't understand it, then, please, ask for guidance. Understanding such a document doesn't directly tells you how to build secure code but it is a good indicator on your level of understanding on secure development.
Find good general practices that lead to secure development
While many documents tell you how things may go wrong, few resources actually tell you how to avoid them in a general way.
Currently, I'd mostly recommend these resources:
Find resources tailored for your technology
Get access to resources that tell you "how to do this" in a language that you speak. Typically, C#. The MSDN portal provides developers with many security checklists (http://msdn.microsoft.com/en-us/library/ms998408.aspx).
Finally, get into it: connect to regular input on application security, find blogs, read news (build Google alerts with some vulnerabilities names or words such as 'application security' or 'secure development') and see what happens.
Hope it helps.
sb
PS: sorry for the 'google' links, I am a new user and can only post 1 url in my answers :(