Secure, Resilient, and Agile Software Development

Chapter 8

Testing Part 1: Static Code Analysis

At this point in the book, we have examined specific techniques and approaches to developing secure and resilient software under the shift left and build security in paradigms for a variety of platforms and specialized applications, with a focus on preventing the most common errors and problems that lead to security incidents and data losses.

8.1 Chapter Overview

In Chapter 8 we’ll begin exploring how to test the resilience of custom application code and find ways to further improve it. Topics covered here include:

• The true costs of waiting to find and eradicate software flaws

• Manual and automated source code review techniques

• Shifting left with code analysis tools

8.2 Fixing Early ...