Development is the third phase of Software Development Life Cycle where the Developers code as per the requirements. The Secure Code Review process includes: Identify code level issues, Filter false positives, Report and provide relevant fix recommendations, Review after fixes. Advantages of Secure Code Review include identification of security vulnerabilities, logic bombs / malicious codes and also ensure the code is in-line with your Organization or Industry Standards. More insight to logic bombs could be developers intentionally leaving behind a malicious code. For example: code to delete entries from Salary table. Example of Security Bugs could be: Missing Authorization checks during any insert operation. If your Organization mandates session timeout to be after 10mins of user inactivity, the code may be written to timeout after 45mins of inactivity. These are some of the possible code level vulnerabilities. Engage us to get your source code reviewed to identify and remediate the various code level flaws. Visit SecureFirstSolutions.com to know more about our offerings. Thank you.

1. Develop Phase
Secure Code Review

2. Identify
Code level
issues
Filter false
positives
Report &
recommend
fixes
Review
after fixes
STEP 1:
Identify code level issues
STEP 2:
Filter out false positives
STEP 3:
Report & provide relevant
Fix recommendations
STEP 4:
Review after fixes

3. Identify&
remediate
Security bugs /
Vulnerabilities
at Code level
Identify &
eliminate Logic
bombs /
malicious codes
In-line with
Organization &
Industry
Standards

4. Logic Bombs
• For Example: Code to delete
database entries
Security Bugs
• Missing Authorization checks
• Missing User input validation
Organization Standards
• Session Timeout:
• Standard mandates 10mins
• However the developer sets
60mins
• Thus bypassing
Organization Standard
DELETE * FROM SALARY_TABLE; INSERT INTO SALARY_TABLE
VALUES ……………….;
INSERTED
Session Timeout
Per Standard:
10mins
Coded:
45mins

5. www.SecureFirstSolutions.com
info@SecureFirstSolutions.com
!! Contact Us Today !!