This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Code Review Guide Table of Contents"
From OWASP
(→Automating Code Reviews) |
|||
Line 41: | Line 41: | ||
#[[Preface ]] | #[[Preface ]] | ||
#[[Reasons for using automated tools]] | #[[Reasons for using automated tools]] | ||
− | #[[Education and cultural change]] | + | #[[Education and cultural change] |
+ | #[[Tool Deployment Model]] | ||
==[[References]]== | ==[[References]]== | ||
[[Category:OWASP Code Review Project]] | [[Category:OWASP Code Review Project]] |
Revision as of 09:04, 9 January 2007
[hide]
Methodology
Design review
Examples by Vulnerability
- Buffer Overruns and Overflows
- OS Injection
- SQL Injection
- Data Validation
- Error Handling
- The Secure Code Environment
- Transaction Analysis
- Authorization
- Authentication
- Session Integrity
- Cross Site Request Forgery
- Cryptography
Language specific best practice
Java
- Inner classes
- Class comparison
- Cloneable classes
- Serializable classes
- Package scope and encapsulation
- Mutable objects
- Private methods & circumvention
.NET
PHP
Automating Code Reviews
- Preface
- Reasons for using automated tools
- [[Education and cultural change]
- Tool Deployment Model