From the course: Static Application Security Testing

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

OWASP Code Review Guide

OWASP Code Review Guide - SonarQube Tutorial

From the course: Static Application Security Testing

Start my 1-month free trial Buy for my team

OWASP Code Review Guide

“

- [Instructor] If you are looking for a step-by-step guide to performing a source code security review, then the OWASP Code Review Guide is the first resource you should check out. This guide begins with considerable information on what a code security review is, how to scope it, how to couple these reviews with penetration testing, and a methodology for integrating these reviews into your SDLC. OWASP built this guide to align with the top 10 web application security risks. For each item in the top 10, the code review guide includes specific code snippets, that demonstrate how those flaws might actually appear in source code. More importantly, the guide shows you what to review and how to validate that the code is resistant to certain attacks. The guide also includes detailed references for further reading, using resources that are both internal to OWASP, and resources hosted on external sites like mitre.org,…

Contents