%PDF-1.6
%
270 0 obj
<>1<
>2<>3<>4<>5<>6<>7<>8<>9<>10<>11<>]>>>>
endobj
269 0 obj
<>
endobj
254 0 obj
<>
endobj
376 0 obj
<>stream
2011-05-20T22:09:38-03:00
LaTeX with hyperref package
2011-08-17T18:25:46-03:00
2011-08-17T18:25:46-03:00
application/pdf
pdfTeX-1.40.11
False
This is MiKTeX-pdfTeX 2.9.4052 (1.40.11)
uuid:b68cc91c-3ef9-482a-9b9e-9202c2490c88
uuid:3881a3d7-d3c7-4a0a-a795-3b410703904b
endstream
endobj
275 0 obj
<>/Encoding<>>>>>
endobj
253 0 obj
<>
endobj
77 0 obj
<>
endobj
78 0 obj
<>/Font<>/ProcSet[/PDF/Text]/ExtGState<>>>/Type/Page>>
endobj
91 0 obj
<>
endobj
399 0 obj
<>stream
q
1 0 0 1 -0.0070648 0.0002594 cm
0 0 595.276 841.89 re
W n
q
1 0 0 1 -1.7832642 27.0383911 cm
0 0 595.276 841.89 re
W n
1 0 0 1 1.790329 -27.0386505 cm
BT
/T1_0 17.215 Tf
160.016 691.324 Td
[(T)78(o)]TJ
17.611 0 Td
(w)Tj
1 0 0 1 -1.7904 27.0387 Tm
190.452 664.286 Td
[(ards)-302(Secure)-302(Scripting)-302(Dev)26(elopmen)26(t)]TJ
/T1_1 11.955 Tf
-10.3 -28.892 Td
[(F)82(acundo)-327(F)82(errer)]TJ
/T1_2 11.955 Tf
-34.968 -13.948 Td
(facundo.ferrer@intel.com)Tj
/T1_1 11.955 Tf
205.156 13.948 Td
[(Andres)-326(More)]TJ
/T1_2 11.955 Tf
-31.4 -13.948 Td
(andres.more@intel.com)Tj
/T1_1 11.955 Tf
-143.971 -19.8 Td
[(Argen)27(tina)-326(Soft)27(w)27(are)-326(Dev)27(elopme)1(n)27(t)-327(Cen)28(ter)-327(\(In)28(tel\))]TJ
/T1_3 8.966 Tf
101.395 -35.866 Td
(Abstract)Tj
/T1_4 8.966 Tf
-112.832 -15.616 Td
[(This)-344(w)29(ork)-344(re\rects)-343(t)28(w)29(o)-344(separate)-344(e\013orts)-343(to)28(w)29(ards)-344(implemen)29(ting)-344(securit)29(y)]TJ
-13.823 -10.959 Td
[(a)29(w)28(areness)-501(in)-501(pro)-57(jects)-501(b)-29(eing)-501(dev)29(elop)-29(ed)-501(using)-501(scripting)-501(languages.)-933(The)]TJ
0 -10.959 TD
[(same)-464(dev)28(elopmen)29(t)-464(pro)-29(cess)-464(w)28(as)-464(used)-464(in)-464(b)-29(oth)-464(pro)-57(jects)-465(whic)29(h)-464(included)-465(a)]TJ
T*
[(sp)-28(eci\fc)-323(fo)-28(cus)-322(on)-323(securit)29(y)86(.)-450(Besides)-323(su)1(mmarizing)-323(lessons)-322(learned,)-326(this)-322(w)28(ork)]TJ
T*
[(recommends)-332(automatic)-332(to)-29(ols)-332(for)-332(static)-333(co)-28(de)-333(ana)1(ly)-1(sis)-332(to)-332(ensure)-332(that)-333(usual)]TJ
T*
[(pitfalls)-354(are)-355(a)29(v)28(oided)-354(from)-355(the)-354(v)28(ery)-354(b)-29(eginning.)-493(This)-354(w)29(ork)-355(con)29(tributes)-355(with)]TJ
T*
[(an)-279(o)29(v)28(erview)-279(of)-278(sp)-29(eci\fc)-279(insigh)29(ts)-279(on)-279(P)29(erl)-279(and)-279(Python)-279(securit)29(y)85(,)-291(together)-279(with)]TJ
T*
[(a)-375(list)-376(of)-375(publicily)-376(a)29(v)57(ailable)-375(supp)-29(ort)-375(to)-29(ols,)-383(and)-376(ho)29(w)-375(they)-376(are)-375(b)-29(est)-375(applied)]TJ
T*
[(and)-339(in)29(tegrated)-339(in)28(to)-339(the)-339(dev)29(elopmen)28(t)-339(pro)-28(cess.)-456(The)-339(prop)-29(osed)-339(dev)29(elopmen)29(t)]TJ
T*
[(framew)29(ork)-316(is)-315(based)-316(on)-316(a)-315(supp)-29(orting)-315(infrastructure)-316(wh)1(ic)28(h)-315(minimizes)-316(e\013ort)]TJ
0 -10.958 TD
[(on)-363(p)-29(eer)-363(reviews)-364(and)-363(allo)29(ws)-364(early)-363(iden)28(ti\fcation)-363(of)-363(securit)28(y)-363(issues,)-369(making)]TJ
0 -10.959 TD
[(their)-342(resolution)-343(easier)-342(and)-343(c)29(heap)-29(er.)]TJ
/T1_5 14.346 Tf
-24.907 -32.946 Td
[(1)-1125(In)31(tro)-31(duction)]TJ
/T1_6 9.963 Tf
0 -21.821 TD
[(This)-247(w)28(orks)-247(sho)28(ws)-248(th)1(e)-247(e)-1(xp)-27(erience)-247(on)-247(ho)28(w)-247(s)-1(crip)1(ting)-247(dev)27(elopmen)28(t)-247(can)-247(b)-28(e)-247(done)-247(with)]TJ
0 -11.955 TD
[(a)-339(securit)28(y)-339(fo)-28(cus.)-461(Be)-1(sides)-339(b)-27(est)-339(kno)27(wn)-339(metho)-27(ds)-339(on)-339(secure)-339(dev)27(elopmen)28(t,)-340(sp)-28(eci\fcs)]TJ
T*
[(ab)-28(out)-333(the)-333(P)27(erl)-333(and)-333(Python)-333(programming)-334(langu)1(age)-1(s)-333(are)-333(discussed)-334(in)-333(detail.)]TJ
/T1_5 11.955 Tf
0 -27.889 TD
[(1.1)-1125(Bac)31(kground)]TJ
/T1_6 9.963 Tf
0 -18.389 TD
[(Among)-537(the)-538(di\013eren)28(t)-537(programming)-537(languages)-538(b)-28(eing)-537(used)-537(around)-537(the)-538(w)28(orld,)]TJ
0 -11.955 TD
[(scripting)-298(languages)-298(acc)-1(ou)1(n)27(t)-298(for)-298(a)-298(signi\fcan)28(t)-299(p)-27(ortion.)-433(As)-298(of)-299(to)-27(da)28(y)83(,)-305(Python)-298(holds)]TJ
0 -11.956 TD
[(the)-309(6th)-308(and)-309(P)28(erl)-309(the)-309(9th)-308(p)-28(osition)-309(on)-308(the)-309(ranking)-309(of)-308(the)-309(most)-309(p)-28(opular)-308(languages)]TJ
0 -11.955 TD
[(according)-333(to)-334(TIOBE.)-333(See)-333(\fgure)-667(1)-333(for)-334(the)-333(April)-333(2011)-333(TIOB)-1(E)-333(index.)]TJ
169.365 -178.357 Td
(1)Tj
ET
Q
Q
q
1 0 0 1 186.6864929 14.3997803 cm
/GS0 gs
/Fm0 Do
Q
endstream
endobj
397 0 obj
<>
endobj
84 0 obj
<>
endobj
85 0 obj
<>
endobj
86 0 obj
<>
endobj
87 0 obj
<>
endobj
88 0 obj
<>
endobj
89 0 obj
<>
endobj
90 0 obj
<>
endobj
230 0 obj
<>
endobj
216 0 obj
[583.3 555.6 555.6 833.3 833.3 277.8 305.6 500 500 500 500 500 750 444.4 500 722.2 777.8 500 902.8 1013.9 777.8 277.8 277.8 500 833.3 500 833.3 777.8 277.8 388.9 388.9 500 777.8 277.8 333.3 277.8 500 500 500 500 500 500 500 500 500 500 500 277.8 277.8 277.8 777.8 472.2 472.2 777.8 750 708.3 722.2 763.9 680.6 652.8 784.7 750 361.1 513.9 777.8 625 916.7 750 777.8 680.6 777.8 736.1 555.6 722.2 750 750 1027.8 750 750 611.1 277.8 500 277.8 500 277.8 277.8 500 555.6 444.4 555.6 444.4 305.6 500 555.6 277.8 305.6 527.8 277.8 833.3 555.6 500 555.6 527.8 391.7 394.4 388.9 555.6 527.8 722.2 527.8 527.8 444.4]
endobj
229 0 obj
<>stream
xڌP].6ac;Aw$,8wwww rw#߫5zvh]sAI(bno
02TYY ,,L,,lH.(5N Ĝ&.`XOuXXXX l,,QwY 3? 3Z +//7? ; `b3ͬ.FŁݝΙRnbP:܀ Mʌ ne/ ZA`W9 &)K XXֿY1613s0yZ,ֶ@<d[lofbmkb
V'r
s6svpqfr"o7*K g[;edWg?A sI:0k]2V,. Nn^v 0b^!o18_o{8
pqrz}`nm0ZZx;Y{ X
`'xۃl=_f5MeE5e3QQ{7#{ȸOHM_e@ .pX{ehˠhe p^Lo/otc;k[+G
_U-VYhnjOe\L!o%=.fVtTw0gBq# xRdfo{8 &NN&Hփ'@Fw ,읐~w,[/`bY0Kq % V `2Y"c(AX p,JE