METHODS AND SYSTEMS FOR PROVIDING FEEDBACK AND SUGGESTED PROGRAMMING METHODS

摘要

The techniques and supporting systems described herein provide a comprehensive and customizable approach to identifying the use of best practices during the design and development of software applications, as well as recommending additional enhancements or courses of action that may be implemented to further improve the application. Target software application code is received specific application security best practices applicable to the target software application are identified. Locations in the code where the various best practices ought to be implemented are then identified, and a determination is made whether the relevant best practices are implemented for each location. Finally, positive feedback is provided to the developers for what appears to be their correct implementation of best practices.

主权项

1. A software security assessment platform, comprising:
a communications server, which in operation, receives technical characteristics of a target software application and business context information relating to the target software application; an analysis engine, which in operation:
examines code of the target software application received and identifies specific application security best practices that are applicable to the target software application;identifies locations in the code of the target application where the identified best practices ought to be implemented and determines for each of the locations whether the relevant best practices appear to have been implemented;determines at each of the locations whether the relevant best practices appear to have been implemented correctly and to what extent they have been implemented incompletely or incorrectly; andprovides positive feedback to developer of the target software application for what appears to be their correct implementation of the best practices.