From the course: CompTIA Security+ (SY0-701) Cert Prep

Unlock the full course today

Join today to access over 24,200 courses taught by industry experts.

Code review

Code review

From the course: CompTIA Security+ (SY0-701) Cert Prep

Start my 1-month free trial Buy for my team

Code review

“

- [Instructor] Software code is one of the most common sources of security vulnerabilities. Developers write millions of lines of code each year, and there are thousands of security issues buried in the complexity of that code just waiting to be discovered. Manual code reviews are one of the most important software testing techniques to uncover these vulnerabilities. During a code review, developers have their work reviewed by other developers who examine the code to ensure that it doesn't contain obvious or subtle security issues. This process may be totally informal, completely formal, or something in between. The most formal code review process is known as the Fagan inspection. Fagan inspections follow a six step process. During the first step, planning, developers perform the pre-work required to get the code review underway. This includes preparing the materials required for the review, identifying the participants, and scheduling the review itself. Next, the review moves on to…

Contents