This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Chapters Assigned"
From OWASP
(→Design review) |
|||
Line 6: | Line 6: | ||
== Design review == | == Design review == | ||
− | #Designing for security | + | #Designing for security |
+ | ## - M Roxberry(.NET) | ||
+ | ## - (Java) | ||
+ | ## - PHP | ||
+ | ## - C/C++ | ||
+ | ## - MySQL | ||
==Examples by Vulnerability== | ==Examples by Vulnerability== |
Revision as of 15:30, 11 January 2007
Methodology
- Code Review Introduction
- Steps and Roles
- Code Review Processes
Design review
- Designing for security
- - M Roxberry(.NET)
- - (Java)
- - PHP
- - C/C++
- - MySQL
Examples by Vulnerability
- Reviewing Code for Buffer Overruns and Overflows
- Reviewing Code for OS Injection
- Reviewing Code for SQL Injection
- Reviewing Code for Data Validation
- Reviewing Code for Error Handling
- Reviewing Code for Logging Issues
- Reviewing The Secure Code Environment
- Transaction Analysis
- Authorization
- Authentication (Code review)
- Session Integrity
- Cross Site Request Forgery
- Cryptography
- Dangerous HTTP Methods
- Race Conditions
Language specific best practice
Java
- Inner classes
- Class comparison
- Cloneable classes
- Serializable classes
- Package scope and encapsulation
- Mutable objects
- Private methods & circumvention
.NET
PHP
Automating Code Reviews
- Preface
- Reasons for using automated tools
- Education and cultural change
- Tool Deployment Model