Property templates for checking source code security

2017 ◽  
Author(s):  
Elizabeth I. Leonard ◽  
Myla M. Archer ◽  
Constance L. Heitmeyer
Keyword(s):  
Source Code ◽  
Code Security

Source code security

1987 ◽  
Vol 17 (4) ◽  
pp. 26-28
Author(s):  
Jon Corelis
Keyword(s):  
Source Code ◽  
Code Security

scholarly journals Source code security analysis tool functional specification version 1.0

2007 ◽  
Author(s):  
Paul E Black ◽  
Michael Kass ◽  
Michael Koo
Keyword(s):  
Source Code ◽  
Security Analysis ◽  
Analysis Tool ◽  
Functional Specification ◽  
Code Security

scholarly journals Source code security analysis tool test plan version 1.1

2011 ◽  
Author(s):  
Michael Koo ◽  
Romain Gaucher ◽  
Charline Cleraux ◽  
Jenise Reyes Rodriguez
Keyword(s):  
Source Code ◽  
Security Analysis ◽  
Analysis Tool ◽  
Test Plan ◽  
Code Security

White-Box Testing Automation With SonarQube

2019 ◽  
pp. 64-88
Author(s):  
Miguel Jorge Andrade
Keyword(s):  
Source Code ◽  
Test Design ◽  
Security Testing ◽  
Work Patterns ◽  
Security Issues ◽  
Code Security ◽  
White Box Testing ◽  
Security Inspection ◽  
Design And Testing ◽  
Modern Work

Modern work patterns like continuous integration (CI) have an implicit need for testing automation. In current CI solutions, white-box testing is left to the work methodology, typically addressed after code reviews. Code security inspection is often done in specific code reviews focusing on security. SonarQube is a tool that, to a certain extent, can automate white-box design and testing and serve as a guide for formal code reviews. Moreover, this tool can help audit the code for potential security issues. Most web programming today uses components readily available and transparently managed by package managers, like npm for Node.js or Composer for PHP. This use must also be audited at least for potential security problems; yet traditional white-box test design would require a good understanding of the vendor code, which can be difficult/impractical to achieve. This chapter will address SonarQube as a valuable tool to automate white-box and security testing and also provide suggestions on how to manage your vendor branches when there is a need to audit/change the vendor source code.

Source code security: checklist for managers

1987 ◽  
Vol 5 (2) ◽  
pp. 12-16
Author(s):  
Jon Corelis
Keyword(s):  
Source Code ◽  
Code Security

scholarly journals Detection of Source Code Security Vulnerabilities Using code2vec Model

2020 ◽  
Vol 16 (2) ◽  
pp. 45-52
Author(s):  
Joon Hyuk Yang ◽  
Ji Hwan Mo ◽  
Sung Moon Hong ◽  
Kyung-Goo Doh
Keyword(s):  
Source Code ◽  
Security Vulnerabilities ◽  
Code Security
Sign in / Sign up

Export Citation Format

Share Document