Part 9 - Secure development
In order to save a lot of time in code auditing, developers must follow coding guidelines.
Secure build
Kernel build
Tools like:
Domain | Improvement |
---|---|
SecureDev-SecureBuild-1 | Add content. |
App/Widget signatures
Domain | Improvement |
---|---|
SecureDev-Signatures-1 | Add content. |
Code audit
These tools are used to check the correct implementation of functionalities and compliance with related good practices.
Domain | Improvement |
---|---|
SecureDev-CodeAudit-1 | Add CVE analyser. |
SecureDev-CodeAudit-2 | OSSTMM. |
SATS
- RATS (Maybe to old).
It is necessary to verify that the application code does not use functions that are depreciated and recognized as unsecured or cause problems.