DocumentCode
2618897
Title
Design and implementation of code security inspection system based on SVN
Author
Liu, Jun ; Liu, Xiaoming ; Zheng, Bo ; Tang, J.
Author_Institution
Coll. of Comput. Sci. & Technol., Wuhan Univ. of Sci. & Technol., Wuhan, China
fYear
2011
fDate
27-29 June 2011
Firstpage
330
Lastpage
333
Abstract
This paper proposes a code security inspection system based on the Subversion, which aims to avoid the submission of risk codes that contain vulnerabilities such as SQL injection, XSS (Cross Site Script) attacks and CSRF (Cross-site request forgery) to SVN repositories. In the proposed system, the submitted code will be scanned and checked and then the results will be sent to the SQA (Software Quality Assurance) units to ensure the product´s safety. The system mainly adopts dependency injection and inversion of control used in the spring framework, and thus it has high scalability and maintainability. The system is also practical, independent, and highly configurable which can meet the needs of different users.
Keywords
SQL; configuration management; security of data; software quality; SQL injection; SVN repository; XSS attacks; code security inspection system; cross site script attacks; cross-site request forgery; dependency injection; software quality assurance; spring framework; subversion; Databases; Engines; Forgery; History; Inspection; Libraries; Security; CSRF; Code Security Inspection; SQL Injection; SVN; XSS;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Science and Service System (CSSS), 2011 International Conference on
Conference_Location
Nanjing
Print_ISBN
978-1-4244-9762-1
Type
conf
DOI
10.1109/CSSS.2011.5974598
Filename
5974598
Link To Document