The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Its core purpose is to help organizations improve their software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time.
There are two versions of the book Secure Coding in C and C++.
Secure Coding in C and C++, Second EditionApril 2013
In this book, Robert Seacord describes how to write secure C and C++ code and avoid the software defects most likely to cause exploitable vulnerabilities.
Secure Coding in C and C++September 2005
In this book, Robert Seacord identifies root causes for exploited software vulnerabilities and encourages programmers to adopt security best practices.