- Managed Services
- Professional Services
- …
- Managed Services
- Professional Services
- Managed Services
- Professional Services
- …
- Managed Services
- Professional Services
Source Code Review Service
An Application Source Code Review Will Consist Of Static (SAST) And Dynamic Source Code Security Assessment (DAST), Vulnerability Scanning, Automated And Manual Identification of Vulnerabilities, Logical Errors and Weaknesses In Your Source Code.
Highlights
Spidering - attempts to identify application functionality by automated traversal of site hierarchy and permuting common variations on popular naming conventions.
Manual fault injection -manual submission of malicious data to identify security vulnerabilities in request path.
Automated fault injection ( fuzzing ) - automated submission of a range of malicious data to identify security vulnerabilities in request path.
Known vulnerability testing - identification of vulnerabilities in the hosting platform ( web server , servlet container ) using primarily automated analysis techniques .
Candidate point - automated analysis to pinpoint known vulnerability patterns , followed by manual analysis to validate any vulnerability candidate.
Data correlation.
Research vulnerabilities.
Eliminate false positives.
Investigate the extent of the findings.
Report generation.
Safe Decision Co. © 2024