Search for

The Path to a Secure Application: A Source Code Security Review Checklist

This paper details the path you must follow to find and eliminate the coding errors and design flaws that expose data and put organizations at risk. Includes details of the five major vulnerability categories and an actionable source code security review checklist. Take the path to more secure software today.

Published Date: 2007-10-11

No. of Pages: 16

Summary:

The path to creating a secure application begins by rigorously testing source code for any and all vulnerabilities, to ensure the application will not compromise, or allow others to compromise, data privacy and integrity.

For companies using custom-built, outsourced, or open source applications in-house, ensuring all current and legacy code is secure, however, will be no small challenge. Detecting and eradicating security vulnerabilities has historically been extremely difficult. Many organizations relied on manual code review, which is costly and labor-intensive, as well as penetration testing, which examines only a subset of potential application vulnerabilities in an application.

While both of these approaches have their uses, automatic software vulnerability scanning tools now allow companies to approach secure code development in a more systematic, automated, and successful manner. These automatic vulnerability scanning tools greatly improve the speed and accuracy of code review, and may be integrated seamlessly into the development lifecycle. In fact, the best tools can pinpoint each vulnerability at the precise line of code and provide detailed information about the type of flaw, the risk it poses, and how to fix it.

 

The path to creating a secure application begins by rigorously testing source code for any and all vulnerabilities, to ensure the application will not compromise, or allow others to compromise, data privacy and integrity.

For companies using custom-built, outsourced, or open source applications in-house, ensuring all current and legacy code is secure, however, will be no small challenge. Detecting and eradicating security vulnerabilities has historically been extremely difficult. Many organizations relied on manual code review, which is costly and labor-intensive, as well as penetration testing, which examines only a subset of potential application vulnerabilities in an application.

While both of these approaches have their uses, automatic software vulnerability scanning tools now allow companies to approach secure code development in a more systematic, automated, and successful manner. These automatic vulnerability scanning tools greatly improve the speed and accuracy of code review, and may be integrated seamlessly into the development lifecycle. In fact, the best tools can pinpoint each vulnerability at the precise line of code and provide detailed information about the type of flaw, the risk it poses, and how to fix it.

 

 

Sponsored Content

Sign In

Please sign in and you will have access to all the content available on CIO.in

E-mail


Password




Forgotten password?

One Time Registration Only !

Register now For your free CIO.in account and avail the following key benefits:
  • Never fill up any form to download whitepapers and case studies
  • Special invitations to CIO events
  • Be the first to get CIO reports & analysis
  • CIO special offers... and much more!
Common Content

5 Best Practices on Cloud Migration

 Businesses are gaining a cutting edge by migrating more and more applications to the cloud. Learn the five best practices that will help you manage your applications and solutions in the most secure manner on the cloud.

Common Content

What to Consider While Selecting Public Cloud Service?

Cost usually rules the mind, when it comes to choosing a public cloud service provider. What actually matter are several other factors such as VM migration, storage and auto-scaling, and above all ease of support interaction, and not having to deal with a faceless organization.