Posts

Showing posts from February, 2023

Security Code Review

Image
  Security code review, also known as code security review or secure code review, is a process in software development where the source code of an application is systematically and manually examined to identify and fix security vulnerabilities. The goal is to ensure that the code complies with security best practices, follows coding standards, and does not contain vulnerabilities that could be exploited by attackers. Objective: Identify Vulnerabilities: The primary goal of a security code review is to identify security vulnerabilities in the code, such as injection flaws, authentication issues, authorization problems, and other common security risks. Security code reviews covered area's Authentication,  authorization,  security configuration,  session management,  logging,  data validation,  error handling, and  encryption Timing: Throughout the Software Development Lifecycle: Code reviews are most effective when conducted regularly throughout the development process, from the init