Source Code Review

The source code of an application is the human programmer's definition of how a system should behave. Unfortunately the human element introduces scope for error, which is commonly seen through well-known errors such as buffer overflows.

Even the smallest of programs can contain coding errors (sometimes non-obvious) that might lead to conditions enabling undesired behaviour of the running program. As software provides the interface to systems and applications, the possibility of exploitation and manipulation of coding errors to circumvent the security controls of IT systems and networks becomes of great concern. Similarly, the reliability of software is paramount in maintaining business continuity, and organisations cannot afford the downtime that may result from denial of service attacks enabled through inherent coding errors and software bugs.

IRM's Secure Code Review service evaluates source code for common programming errors that may result in compromise or unintended behaviour of systems and processes. The result is comprehensive coverage and assured protection from vulnerabilities during any phase of the application lifecycle.