slike bài giảng lập trình an toàn lương ánh hoàng

!"#$%&'$(&)*+$%&
(*,$%-,./*0123(42356437$&
!89&:;<=)&>=&:?@=&
A514B5&9B*%B,CC0$%&
!  "#$%&'()&'*'&+,-$&./0'1&+2&./#3.&'4&56$&78&9:;&<=$%&'*'&0$%&<>$%&?$&
.@A$B&
DE1&FG1(&
C&
!  DE#&'F#&GH&+,-$&./0'I&
J  K$&$,$/&LM$%&
J  N%O$&$%P&Q3)&.RS$/&"T"UUB&
!  VE$&QW)&7F;&7X&
HI4&1J4&
Y&
!  Z/[,&Q\]$%I&^_&., &
J  V`&./#; I&Ya&., &
J  bA,&.3)Ic_&., &
:(K0&-"L$%&CM$&(N1&
^&
!  de'#Re&fR@%R?L&"@@+5@@+&g@R&"&?$<&"UU1&Matt$Messier,$
John$Viega,$O'Reilly$2003B$
:+0&-0O4&
_&
!  "/\4$%&cB&h,8L&.R?&7F#&GA@&
!  "/\4$%&CB&h,8L&i@*.&.R#;&$/3)&
!  "/\4$%&YB&h,8L&i@*.&9#$%&7j.&
!  "/\4$%&^B&kl&/m?&7n,&90$%&
!  "/\4$%&_B&oAL&5pL&GA&9*'&./='&./O$%&7,q)&
!  "/\4$%&rB&kl&/m?&'O$%&+/?,&
!  "/\4$%&sB&K$.,tZ?L)eR,$%&
!  "/\4$%&uB&"*'&G($&7H&+/*'&

=P0&64$%&
r&
s&
!  bA,&.3)&QW$I&sav&
!  w#*&.RS$/I&Yav&
QR$(&%0R&
u&
!"#$%&'$(&)*+$%&
(*,$%-,./*0123(42356437$&
S("#$%&T3&U0VC&2B,&FJ4&7+*&
W$X42&Y,-06,2 0*$&
cBc&N%#;E$&.x'&+,8L&.R?B&
cBC&"*'&/AL&7y$/&<M$%&9:#&zi.R,$%&g@RL? ,$%{&B&
cBY&ZRA$&5j&7qLB&
cB^&ZRA$&in&/|'B&
cB_&h,8L&.R?&.E$&},Qe&GA&7\[$%&<~$B&
cBr&•,6,&Ll&€•V&
cBs&"R@iitd,.e&d'R,).,$%&
cBu&dwV&‚$ƒe'.,@$&
=P0&64$%&
ca&
!  V#O$&Q#O$&%,6&7y$/&<P&Q,q#&7F#&GA@&QA&+/O$%&7*$%&.,$&'3;&
J  „P&Q,q#&.…&LM$%&.R@$%&LO&/S$/&'Q,e$.tieRGeR&
J  „P&Q,q#&.…&$%\[,&<†$%&
J  „P&Q,q#&.…&.q)&.,$&
J  ‡&
!  ˆ#&.,E$&Q@M,&5‰&<P&Q,q#&/4$&QA&'n&%x$%&iŠ?&'/P?&<P&Q,q#B&
!  Z/='&/,q$&+,8L&.R?&7F#&GA@&.M,&$/,H#&'()1&$/,H#&7,8L&
J  h,8L&.R?&7F#&GA@&‹&'*'&/AL&
J  h,8L&.R?&7F#&GA@&%,P?&'*'&L@<#QeB&

J  ‡&
!  h/O$%&.,-)&$/3$&Qq$/&.R='&.,-)&.…&$%\[,&<†$%&$-#&'/\?&Œ#?&+,8L&.R?B&
!  h,8L&.R?&'*'&+`&.=&7•'&5,q.1&<(#&$/*;B&
!  ZSL&/,8#&GA&iŠ&<>$%&'4&'/-&.RŽ'/&<~$&zŒ#@.,$%&Le'/?$,iL{&$-#&'F$B&
!  "A$%&/,8#&GH&<P&Q,q#&5?@&$/,E#&'A$%&Q|'&7\]'&.n.&5(;&$/,E#B&
T3T&SR1&$%4ZI$&2[1&\0VC&2B,&
cc&
!  o|&'*'&/AL&!"#$%&'()*)+,+ /'())'/@&)/•)&7y$/&<M$%&<P&Q,q#&R(.&LHL&<•@&GA&
LM$/&L‘&.#;&$/,E$&'’$%&'='&+“&$%#;&/,8LB&
!  Z/3$&.R|$%&+/,&iŠ&<>$%&”]$•&
J  Z/?L&in&v$&'/@&)/•)&%/,&R?&in&Q\]$%&+`&.=&7l&+ &9#(.&7\]'&R?&Lj.&7y?&'/–&5(.&+“&'/–&R?&
.R@$%&./?L&in&.\4$%&0$%B&N-#&+/O$%&.—$&.M,&./?L&in&$A@&./S&XB0$2^&i‘&%/,&7˜&QE$&Lj.&G†$%&
$A@&7m&./#j'&i.?'+&'X?&Q#—$%&7?$%&./='&./,B&
J  ™„B&
!"# $%&'"#()$*$+,$
-)!"#./01(22&3"456%&'"#()7,$88$9:5$%&'"#()$*$;$
-)!"#./01(22&3"47,$88$<='>$?!@A$BBB$$
!  h/O$%&iŠ&<>$%&.R='&.,-)&9:#&7y$/&<M$%&.…&$%#—$&5E$&$%@A,&
J  š:#&7y$/&<M$%&'m&$%#—$&%n'&.…&$%@A,&'/\4$%&.RS$/&'m&./8&'m&Lj.&GA,&+`&.=&7•'&5,q.&LA&
'/\4$%&.RS$/&'/\?&Q\[$%&.R\W'&7\]'1&/@•'&+/O$%&'m&./?L&in&./?;&./-&.\4$%&0$%B&&
J  ™„B&
&%?C) $D#)EF+GHI,$
$=(#D/D#)7,$
$-)!"#./0J!"$%?C&K47,$
$-)!"#./D#)7,$88$<='>$?!@A$BBB$
$-)!"#./03D45D#)7,$88$9:$$
T3_&SR1&(+C&F`$(&6a$%&bc4&
cC&
!  Z/3$&.R|$%&+/,&iŠ&<>$%&i)R,$.g1&Gi)R,$.g&GW,&d]/e&
J  "*'&/AL&.RE$&7H#&%,6&7y$/&+Ž'/&./\W'&5j&7qL&'/@&9:#&7Ž'/&QA&GO&/M$B&

J  NE$&'/–&R›&in&Q\]$%&+`&.=&.n,&7?&i‘&iŠ&<>$%&+/,&<†$%&GW,&viB&
J  NE$&iŠ&<>$%&i$)R,$.g1&Gi$)R,$.g&$-#&'m&./8B&
J  ™„&
%?C)$D#)EF+GHI,$
%?C)$LD#EMGI,$
=(#D/D#)7,$
D-)!"#./LD#54JC'$N'C$"?C-$NC&$2C$3D45D#)7,$88$<='>$?!@A$
D-)!"#./LD#54JC'$N'C$"?C-$NC&$2C$3OFPD45D#)7,$88$9:$
D"-)!"#./LD#5MG54JC'$N'C$"?C-$NC&$2C$3D45D#)7,88$9:$
&
$
T3_&SR1&(+C&F`$(&6a$%&bc4&
cY&
!  ZRA$&5j&7qL&zb#ggeR&œGeR}Q@•{I&'@);&<P&Q,q#&G\].&Œ#*&5,E$&'X?&Lj.&5j&
7qL&$A@&7m&žŸ&7˜&QE$&G†$%&$/W&'X?&5,-$&z'(#&.R '{&+/*'B&
!  f/F$&QW$&'*'&/AL&9Š&Q`&9:#&.R@$%&"&7H#&+/O$%&./='&/,q$&+,8L&.R?&5,E$&
'X?&5j&7qLI&/0%+*)+%"1!,*)2&
!  ™„cI&„P&Q,q#&5y&/‰$%&
&!"#$ $Q$*$+,$
$%?C) $R'SETI,$
$D#)%->/R'S541(22&$$$UUUUUUUUUUUUUUUUUUUUUUUUUUUUU47,$
$-)!"#./03L45Q7,$
•  ™„CI&d.?'+&5y&/‰$%&
&%?C) $"CA(ETI,$
$=(#D/"CA(7,$
$-)!"#./"CA(7,$
$
T3f&:B+$&gP&FOC&
c^&
!  ™„YI&h/O$%&.R‹&GH&7\]'&.…&'/\4$%&.RS$/&'@$&

$N&!L$1(22&/7$
$V$
$ $%?C)$"CA(ETI,$
$ $-)!"#./0W?C#$!D$>&')$"CA($X47,$
$ $=(#D/"CA(7,$
$ $-)!"#./01(22&$3D$B45$"CA(7, $$
$Y $$
$N&!L$AC!"/7$
$V$
$ $1(22&/7,$
$ $-)!"#./0Z>(47,$
$Y$
T3f&:B+$&gP&FOC&
c_&
!  ™„^I&Z($&'O$%&'m&'/X&`&.RE$&5j&7qL&
$N&!L$Z>(/7$
$V$
$ $-)!"#./0Z>(47,$
$Y$
$N&!L$1(22&/7$
$V$
$ $N&!L$/[-7/7$*$Z>(,$
$ $%?C)$"CA(ETI,$
$ $-)!"#./0W?C#$!D$>&')$"CA($X47,$
$ $=(#D/"CA(7,$
$ $-)!"#./01(22&$3D$B45$"CA(7,$
$ $-/7, $$
$Y $$
$N&!L$AC!"/7$
$V$

$ $1(22&/7,$
$Y$
T3f&:B+$&gP&FOC&
cr&
!  •,6,&)/*)I&&
J  dŠ&<>$%&'*'&/AL&i.R$');1&LeL');‡GA&$/P$%&/AL&'m&+,8L&i@*.&+Ž'/&./\W'&
5j&7qL&Lj.&'*'/&.\[$%&L,$/B&
J  dŠ&<>$%&A2,1\&h4,B6&.R@$%&'*'&.RS$/&5,E$&<y'/&/¡&.R]B&&
J  dŠ&<>$%&ij9&ki,2,&jb51420*$&9B575$2,20*$l&.RE$&/q&7,H#&/A$/&/¡&.R]B&
J  dŠ&<>$%&>A!;&k>66B5//&AX,15&!,Z*42&;,$6*C0m,20*$l&.RE$&.RS$/&5,E$&
<y'/&GA&/q&7,H#&/A$/&/¡&.R]B&
T3f&:B+$&gP&FOC&
cs&
!  „P&Q,q#&$/3$&GH&'m&./8&'m&i?,&im.&.R@$%&.R\[$%&Q,E$&Œ#?$&7-$&+Ž'/&
./\W'B&
!  "*'&./?@&.*'&Q,E$&Œ#?$&7-$&in&$%#;E$&QW$&'m&./8&5y&.RA$1&Q~$&Qj$&%,P?&in&
$%#;E$&+/O$%&<(#&GA&'m&<(#&
!  ™„cI&ZRA$&in&
'"D!="(L$$!"#$Q$*$+Q\\\\\\\\,$88$]UJ^_<`$
!. $/$Qa;$b$;$7$-)!"#.$/0J$b$+4$7$
$(2D( $-)!"#./0J$c$+47,$
•  ™„CI&„†$%&i?,&+,8#&'mT+/O$%&<(#&
&&&&&&&&!.$/Q$c$]UJ^d_ef7$V$$88$Q5$Dg$R>#($%h"$%i-$-?j#$#k>$#?(&$=!l!$#?'m#$#n"?$opq%$
$$$!.$/B/-#)$*$/'"D!="(L$%?C)$[7AC22&%/Q777$CR&)#/$$7,$
$Y$$
$(2D($$
$V$
$ $ $$8[$1C"L2($#?($())&)$%&"L!#!&"$OOO$[8$
$Y$
&&

)))
T3n&:B+$&/o&(N1&
cu&
!  „P&Q,q#&$/3$&GH&'m&./8&QA&.E$&},Qe1&0$%&<>$%&'F$&9*'&7y$/&7\[$%&<~$&
.#;q.&7n,&$-#&'F$&./, B&
!  „†$%&/AL&Re?Q)?./z{&.RE$&€$,9TV,$#9&GA&•e.¢#QQf?./N?Le&.RE$&
£,$<@•iB&
!  dŠ&<>$%&"03-!3%4'()
!  N%#;E$&L~#I&&
&%?C)$[)(C2-C#?/%&"D#$%?C)$[-C#?"CA(5$%?C)$)(D&2N(L^-C#?E]UJrU`1sf<I7,$
!  Z/3$&.R|$%I&"m&./8&.RA$&Rei@QGe<¤)?./&GA&+/O$%&./Re?<ti?geB&
!  Z/\&G,q$I&D#L2!?O?$
!  ™„&
&%?C)$)(D&2N(LEF+GHI,$
$%?C)$[$)(D'2#$*$)(C2-C#?/t-)!"#.O%t5)(D&2N(L7,$
$-)!"#./t3Dt5)(D'2#7,$
)))
T3p&U0VC&2B,&2I$&q0-5&7+&F"K$%&6r$&
c¥&
!  dŠ&<>$%&50%67 83%493:0'()
!  Z/\&G,q$I&•,$<@•iB/&
!  N%#;E$&L~#I&&
&uW9vu$w(#\'22rC#?<CA(/srx`d`v$2-\!2(<CA(5$uW9vu$"Z'S()s("=#?5$sr`d`v$
$ $$$$$$$$$$$$$2-Z'S()5$sr`d`v$[2-\!2(rC#?7,$
!  ™„I&
&!"# $"Z'S()s("$*$+,$
$sr`d`v $2-Z'S(),$
$
$"Z'S()s("$*$w(#\'22rC#?<CA(/st#(D#O%t5+5+5+7,$
$!.$/"Z'S()s("b+7$

$V$
$ $2-Z'S()$*$"(y$`x1UvE"Z'S()s("aFI,$
$ $w(#\'22rC#?<CA(/st#(D#O%t5"Z'S()s("52-Z'S()5+7,$
$ $y-)!"#./st3Dt52-Z'S()7,$
$Y$
&&
)))
T3p&U0VC&2B,&2I$&q0-5&7+&F"K$%&6r$&
Ca&
!  •¢"&csYu&Œ#;&7y$/&'*'/&Ll&/m?&'*'&+`&.=&+/O$%&$/S$&./(;&7\]'&.R@$%&
€•V&<\W,&<M$%&”v¦kl&/e9?Ÿ•B&
!  ™„I& &?##-K88A3PF!2O=&&=2(O%&A$
$?##-K88A3G;3MP3MF!2O=&&=2(O%&A$
•  "*'/&%,6,&LlI&<#;q.&.…&7F#&7-$&'#n,&1&.SL&'*'&+`&.=&v&GA&./?;&./-&5§$%&
Ll&Kd"‚‚&.\4$%&0$%B&
•  h/O$%&iŠ&<>$%&'*'&/AL&9Š&Q`&9:#&'/#¨$&GS&'m&./8&'m&+`&.=&N€VV&.R@$%&
ۥVB&
&&
)))
T3s&h0t0&Cu&v;!&
Cc&
!  "R@iitd,.e&d'R,).,$%&zšdd{&QA&/S$/&./0'&.($&'O$%&GA@&.RS$/&<#;q.&$%\[,&
<†$%&5x.&$%#—$&.…&G,q'&+,8L&.R?&Q‰$%&Q•@&.…&ieRGeRB&
!  "m&./8&<~$&7-$&./(.&./@*.&./O$%&.,$&$/M;&'6LI&L3.&+/¨#1&ieii,@$1&
'@@+,e‡&
!  Z/='&/,q$&5§$%&'*'/&'/˜$&Ll&oZkVT©K™Kd"•‚fZ&GA@&<P&Q,q#&i‘&/,8$&
./y&R?&.RS$/&<#;q.&žŸ&7@M$&Ll&i‘&'/M;&.RE$&.RS$/&<#;q.&'X?&$M$&$/:$B&
!  ™„B&kj.&0$%&<>$%&•e5&'m&/?,&.R?$%&
J  oeQQ@B)/)I&o,8$&./y&g@RL&GA&$/3$&.E$&'X?&$%\[,&<†$%B&
J  "/?@B)/)I&/,8$&./y&.E$&$/3$&7\]'&QM,&'/@&$%\[,&<†$%B&

&&
)))
T3w&SB*//xA025&A1B0X20$%&
CC&
!  ¢,Qe&oeQQ@B)/)&
c1`]sb$
J!"$%?z&5$N'!$2{"=$"?m-$#|"$R}"$
c\9v]$C%#!&"*t%?C&O-?-t$A(#?&L*0r9d`tb$
c!"-'#$#>-(*t#(Q#t$"CA(*t"CA(t8bcR)8b$
c!"-'#$#>-(*tD'RA!#t$NC2'(*td'RA!#tb$
c8\9v]b$
c81`]sb$
•  ¢,Qe&"/?@B)/)&
cXr1r$
(%?&$tJ!"$%?C&$tO~^r9d`E•"CA(•I,$
Xb$
•  „eL@&
•  €•!$#|"$2z$K$d(%')($
•  €•!$#|"$2zK$d(%')($cD%)!-#bC2()#/•Jdd$yCD$.&'"L$B•7,c8D%)!-#b $$
•  €•!$#|"$2zK$d(%')($cD3PM)!-#bC2()#/‚1C%ƒ(L„7,c8D3PM)!-#b$
•  •,6,&)/*)I&V|'&5‰&'*'&./•&oZkV&+/‰,&<P&Q,q#&.…&$%\[,&<†$%B&k¡,&$%O$&
$%P&Q3)&.RS$/&'m&Lj.&'*'/&R,E$%B&
T3w&SB*//xA025&A1B0X20$%&
CY&
!  dwV&‚$ƒe'.,@$I&Z($&'O$%&GA@&"d„V&./O$%&Œ#?&<P&Q,q#&$/3)&.…&.RS$/&
<#;q.B&
!  V],&<>$%&G,q'&+,8L&.R?&Q‰$%&Q•@&.…&7F#&GA@1&'/˜$&Ll&Qq$/&dwV&GA@&'*'&
.R#;&G($&7-$&"d„V&'X?&0$%&<>$%&•e5B&&
!  Z/\[$%&Q],&<>$%&&<(#&$/*;&”&y&”&78&+ &./ '&':#&.R#;&G($&dwV&/@•'&./EL&
'*'&':#&.R#;&G($&+/*'B&

!  ™„I&Vq$/&i@&i*$/&.E$&GA&L3.&+/¨#&.R@$%&dwV&
J  ieQe'.&ª&gR@L&#ieRi&•/eRe&#ieR$?Le&ž&«¬#ieR-&?$<&)?ii•@R<&ž&«¬)?ii-&&
J  N-#&¬#ieR&/@•'&¬)?ii&'/0?&<(#&”-•&./S&dwV&i‘&/,8#&$/FL&$j,&<#$%&.R#;&
G($‡&
!  "*'&+2&./#3.&+/?,&./*'I&K$&$,$/&LM$%&
!  ™„I&kj.&0$%&<>$%&•e5&L#n$&+,8L&.R?&.E$&GA&L3.&+/¨#&%—L&/?,&.R?$%&
J  ?i+B)/)I&o,q$&g@RL&7p$%&$/3)&GA&./#&$/3$&.E$1&L3.&+/¨#&
J  Q@%,$B)/)I&h &$n,&7-$&"d„V&GA&+,8L&.R?&
T3z&A{!&W$|5120*$&
C^&
!  ™„&z.,-)&
J  ¢,Qe&?i+B)/)&
&c1`]sb$
€'!$2&"=$"?C-$#("$NC$AC#$ƒ?C'$
c\9v]$C%#!&"*t2&=!"O-?-t$A(#?&L*twf`tb$
`("K$c_<r…`$#>-(*t#(Q#t$"CA(*t'D()t8bcZv8b$
]C#$ƒ?C'Kc_<r…`$#>-(*t#(Q#t$"CA(*t-CDDt8bcZv8b$
c_<r…`$#>-(*tD'RA!#t$"CA(*td'RA!#tb$$
c8\9v]b$
&&
T3z&A{!&W$|5120*$&
C_&