SCFM: Secure Coding Field Manual is a must for every programmer assigned to write secure code and scan their code regularly with static code analyzers like HP Fortify. SCFM is a desk reference to attacks and programming language mitigations for OWASP Top 10 and CWE/SANS Top 25 security vulnerabilities. Languages covered include Java, C/C++, C#/VB.NET/ASP.NET, COBOL, and PL/SQL & DB2.
SCFM: Secure Coding Field Manual: A Programmer's Guide to OWASP Top 10 and CWE/SANS Top 25
Authors: Sunny Wear, Natalie "Sunny" Wear