<p><a href="https://dwheeler.com" rel="nofollow noreferrer">David A. Wheeler</a> has a collection of essays, including several on software security (particularly targeting Unix/Linux).</p>
<p>There are lots of tools around, including sophisticated checkers that are build on LLVM, like <a href="http://klee.llvm.org" rel="nofollow noreferrer">klee</a>. You'll also find discussions like <a href="https://spectralops.io/blog/top-12-open-source-code-security-tools" rel="nofollow noreferrer">&quot;Top 12 Open Source Security Tools&quot;</a> with a bit of searching.</p>
<p>There are lots of standards, look e.g. at <a href="https://www.kiuwan.com/security-standards-in-software-development" rel="nofollow noreferrer">&quot;Security Standards in Software Development&quot;</a>.</p>

CC BY-SA 4.0
2021-10-13T10:12:39.937Z
2021-10-13T10:12:39.937Z
vonbrand
<p>I have been asked so be the second on grading a paper a Student is going to write about &quot;Creating a methodology for ensuring Code Security/Authenticity&quot;. Sadly this is not my field of expertise.</p>
<p>Now I'm looking for some basic information about methods or software that already exists, so I can get a baseline understanding of the Topic.
These are the Questions that are currently on my mind:</p>
<ul>
<li>Is there already an established best practices?</li>
<li>What are commonly used Methods?</li>
<li>What are the most important points when looking at Code Security?</li>
</ul>
<p>The student will hopefully provide some basics in his paper but I would hate to go into this blind  just to be fair to the student.
I would be grateful if anyone could point me toward  any good introductory material?</p>

<resource-request><undergraduate><resource-information>
Sources on the Topic Source Code Security/Authenticity
# Sources on the Topic Source Code Security/Authenticity

(Asked by: username_0 on 2021-10-13)

I have been asked so be the second on grading a paper a Student is going to write about "Creating a methodology for ensuring Code Security/Authenticity". Sadly this is not my field of expertise.

Now I'm looking for some basic information about methods or software that already exists, so I can get a baseline understanding of the Topic.
These are the Questions that are currently on my mind:

* Is there already an established best practices?
* What are commonly used Methods?
* What are the most important points when looking at Code Security?

The student will hopefully provide some basics in his paper but I would hate to go into this blind just to be fair to the student.
I would be grateful if anyone could point me toward any good introductory material?

**Tags:** resource-request, undergraduate, resource-information


---

## 1 answers

### Answer by username_1 on 2021-10-13. Score: 2 | Accepted answer

[David A. Wheeler](https://dwheeler.com) has a collection of essays, including several on software security (particularly targeting Unix/Linux).

There are lots of tools around, including sophisticated checkers that are build on LLVM, like [klee](http://klee.llvm.org). You'll also find discussions like ["Top 12 Open Source Security Tools"](https://spectralops.io/blog/top-12-open-source-code-security-tools) with a bit of searching.

There are lots of standards, look e.g. at ["Security Standards in Software Development"](https://www.kiuwan.com/security-standards-in-software-development).


---

