Security Code Review

The source code of an application is the human programmer's definition of how a system should behave. Unfortunately the human element introduces scope for error, which is commonly seen through well-known security vulnerabilities and conditions such as buffer overflows. It is a well known fact that proactive identification of such vulnerabilities by means of processes such as code review saves organisations significant time and money as opposed to a test and patch model.

The reliability of software is paramount in maintaining business continuity, and organisations cannot afford the downtime and data compromise that may result from attacks enabled through inherent coding errors and software bugs.

IRM's Source Code Review service enables identification of common programming errors that may result in compromise, or in the unintended behaviour of systems and processes. The result is comprehensive coverage and assured protection from vulnerabilities during any phase of the application lifecycle.

Why IRM?

Over the years IRM consultants have reviewed millions of lines of code written in languages such as C/C++, C#, VB, Java, PERL and have extensive experience with platforms such as J2EE and .NET. From helping a NASDAQ 100 software company ship secure products to reviewing the code base of a next generation media application for smart phones, IRM consultants have worked with a wide variety of architectures and implementation models.