Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Source Code Hardening #193

Closed
wants to merge 1 commit into from
Closed

Conversation

ryantxu1
Copy link
Collaborator

@ryantxu1 ryantxu1 commented Aug 15, 2023

Collection of Source Code Hardening Techniques (address #165). Credit to @rafikap his hard work in producing the majority of this content!

Still a WIP - TODOs:

  • Consider if d3f:DeadCodeElim belongs to Source Code Hardening
  • Need Data Type PR to merge to add better data artifact relationships in input validation/sanitization
  • Consider if the 'Least Privilege Access' concept is captured by 'application configuration hardening'
  • Consider how to add a technique on HTTP Request Uniqueness Validation (nonce)

@netfl0
Copy link
Contributor

netfl0 commented Oct 13, 2023

When you can, please confirm what else needs to be done.

@netfl0 netfl0 added this to the 0.17.0 milestone Apr 26, 2024
@aamedina aamedina mentioned this pull request Sep 26, 2024
@aamedina
Copy link
Collaborator

Fuzzing may sometimes be used as Source Code Hardening: #303

@netfl0
Copy link
Contributor

netfl0 commented Dec 17, 2024

OBE and will revist in next round of SCH additions.

@netfl0 netfl0 closed this Dec 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants