A Process for Performing Security Code Reviews

Authors:
Michael Howard
Affiliations:
Microsoft
Venue:
IEEE Security and Privacy
Year:
2006

Citing 0
Cited 4

Towards certifying the testing process of Open-Source Software: New challenges or old methodologies?

FLOSS '09 Proceedings of the 2009 ICSE Workshop on Emerging Trends in Free/Libre/Open Source Software Research and Development
Software security analysis and assessment model for the web-based applications

Journal of Computational Methods in Sciences and Engineering
Assuring software security against buffer overflow attacks in embedded software development life cycle

ICACT'10 Proceedings of the 12th international conference on Advanced communication technology
OSS-TMM: Guidelines for Improving the Testing Process of Open Source Software

International Journal of Open Source Software and Processes

Quantified Score

Hi-index	0.00

Visualization

Abstract

No one really likes reviewing source code for security vulnerabilities, but it's a critical componentof shipping secure software. Howard describes his approach to tackling the process. It won't identify allsecurity vulnerabilities in your code, but it's effective for scanning large amounts of code quickly forcommon issues and reviewing risky code in greater depth.