Microsoft® Windows® 2000 Security Handbook

Summary

Real security for computers will not be achieved until programmers embrace secure programming practices. Until secure programming techniques are pervasive and old code is reviewed for mistakes, small security holes will continue to plague the information-security world. Also the practice of secure programming is a process, and the more you use it, the better you get at it and the easier it is to implement without going out of your way. Increased security awareness in the programming community can help, so if you find a problem with a fellow programmer, explain why security is important for both programmers and end users.