03. Code Review for Security

Code Review for Security

Code Review as a Security Tool

ND004 C03 L05 A02.3 Limiting Access 1

Security in Code Review

What should you be looking for in code reviews that affect security?

SOLUTION:
  • Sending sensitive data over insecure network interfaces
  • Checks for authentication
  • Logging of passwords or sensitive information
  • Confusing or unclear code
  • Tests covering security principals

Next Concept