- May 31, 2017
- By cEntuRYmINDS
- All
Assist organisations to identify the insecure piece of code which may cause a potential vulnerability in a later stage of the software development process, ultimately leading to an insecure application. Generate a list of security issues found in the code that should be prioritised for repair.
During successive code reviews, identify key characteristics that appear repeatedly and add these to your development department’s coding standards. Over time, this helps raise developer awareness.
Automated tool testing – we use different open source/commercial tools for code reviews to identify application vulnerabilities.
Manual code review – we perform manual code review over the whole code, which may become a very tedious and tiresome process. But in this process, logical flaws will be identified which may not be picked up by automated tools, such as business logic problems. In this process, instead of going line by line through whole code base, we can concentrate on potential problems in the code. Those potential vulnerabilities can be given a high priority.