Chapter 15: Secure Code with Puma Scan
As developers, we are called on not only to implement business functionality but often to function as the first line of defense against attacks. The code that we write needs to be not only performant, flawless, and elegant, but also secure. Many developers have never been exposed to secure coding practices, let alone had the opportunity to develop any proficiency at implementing them.
One of the best ways to spot-check secure coding practices, especially for teams with little or no exposure to secure coding practices, is to use a tool, often called a static source code analyzer, or simply a static analyzer. Fortunately, we have one available for use right in Visual Studio 2019 for Windows and Visual Studio Code (VS Code), called Puma Scan.
In this chapter, we will discuss the following topics:
- Understanding common application security vulnerabilities
- Finding vulnerabilities for fun and profit
- Automating vulnerability detection...
