From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,000 courses taught by industry experts.

Code review

Code review

From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

Code review

“

- [Narrator] Software code is one of the most common sources of security vulnerabilities. Developers write billions of lines of code each year, and there are thousands of security issues buried in the complexity of that code just waiting to be discovered. Code reviews are one of the most important software testing techniques. During a code review, developers have their work reviewed by other developers who examine the code to ensure that it doesn't contain obvious or subtle security issues. This process may be totally informal, completely formal, or something in between. The most formal code review process is known as the Fagan inspection. Fagan inspections follow a six step process. During the first step, Planning, developers perform the pre-work required to get the code review underway. This includes preparing the materials required for the review, identifying the participants, and scheduling the review. Next, the review moves on to the overview phase where the leader of the code…

Contents