• DocumentCode
    2618897
  • Title

    Design and implementation of code security inspection system based on SVN

  • Author

    Liu, Jun ; Liu, Xiaoming ; Zheng, Bo ; Tang, J.

  • Author_Institution
    Coll. of Comput. Sci. & Technol., Wuhan Univ. of Sci. & Technol., Wuhan, China
  • fYear
    2011
  • fDate
    27-29 June 2011
  • Firstpage
    330
  • Lastpage
    333
  • Abstract
    This paper proposes a code security inspection system based on the Subversion, which aims to avoid the submission of risk codes that contain vulnerabilities such as SQL injection, XSS (Cross Site Script) attacks and CSRF (Cross-site request forgery) to SVN repositories. In the proposed system, the submitted code will be scanned and checked and then the results will be sent to the SQA (Software Quality Assurance) units to ensure the product´s safety. The system mainly adopts dependency injection and inversion of control used in the spring framework, and thus it has high scalability and maintainability. The system is also practical, independent, and highly configurable which can meet the needs of different users.
  • Keywords
    SQL; configuration management; security of data; software quality; SQL injection; SVN repository; XSS attacks; code security inspection system; cross site script attacks; cross-site request forgery; dependency injection; software quality assurance; spring framework; subversion; Databases; Engines; Forgery; History; Inspection; Libraries; Security; CSRF; Code Security Inspection; SQL Injection; SVN; XSS;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computer Science and Service System (CSSS), 2011 International Conference on
  • Conference_Location
    Nanjing
  • Print_ISBN
    978-1-4244-9762-1
  • Type

    conf

  • DOI
    10.1109/CSSS.2011.5974598
  • Filename
    5974598