MSDN Architecture Webcast: Using Security Code Reviews to Quickly and Effectively Improve the Security of Your Applications (Level 200)
Overview Security code reviews can play a critical role in improving the quality of an application. However, performing such reviews is not an easy task. This webcast begins with a discussion of who should perform the security code review and how the process should be managed, especially when dealing with millions of lines of code. It defines the major categories of vulnerabilities, show what to look out for, and describe how to go about identifying issues using threat modeling. The difference between flaws and bugs is explained, and potential countermeasures are discussed at both tactical and technology-specific levels. It also provides a brief overview of the automated tools available to help with code reviews.
| Publisher | Microsoft | ||
|---|---|---|---|
| Live Date | 24th May 2006 00:00 BST | ||
| Format | Webcast | ||
| Topics | |||



