what are some good interview questions for a position that consists of reviewing code for security vulnerabilities?
- by John Smith
The position is an entry-level position that consists of reading C++ code and identifying lines of code that are vulnerable to buffer overflows, out-of-bounds reads, uncontrolled format strings, and a bunch of other CWE's.
We don't expect the average candidate to be knowledgeable in the area of software security nor do we expect him or her to be…