About: Code audit

An Entity of Type: work, from Named Graph: http://dbpedia.org, within Data Space: dbpedia.org

A software code audit is a comprehensive analysis of source code in a programming project with the intent of discovering bugs, security breaches or violations of programming conventions. It is an integral part of the defensive programming paradigm, which attempts to reduce errors before the software is released. C and C++ source code is the most common code to be audited since many higher-level languages, such as Python, have fewer potentially vulnerable functions (e.g., functions that do not check bounds).

Property Value
dbo:abstract
  • A software code audit is a comprehensive analysis of source code in a programming project with the intent of discovering bugs, security breaches or violations of programming conventions. It is an integral part of the defensive programming paradigm, which attempts to reduce errors before the software is released. C and C++ source code is the most common code to be audited since many higher-level languages, such as Python, have fewer potentially vulnerable functions (e.g., functions that do not check bounds). (en)
  • En programmation informatique, l'audit de code est une pratique consistant à parcourir le code source d'un logiciel afin de s'assurer du respect de règles précises. L'audit peut avoir un but légal (s'assurer que les licences des différentes parties d'un programme autorisent bien à le distribuer tel quel, ou voir l'audit interne de ReactOS), ou s'assurer de la sécurité du logiciel en testant sa vulnérabilité, ou bien chercher des bugs. L'audit de code est une pratique très fastidieuse et longue. De plus, elle ne permet généralement pas, en raison de la complexité, de dresser une liste exhaustive des problèmes liés au code. L'utilisation de méthodes automatiques permet de dégrossir le travail, mais se reposer uniquement sur ce genre de méthodes peut nous faire passer à côté de problèmes flagrants pour un humain. Cela commence généralement par un travail d'analyse des besoins métiers. La business logic est très difficile à traduire en règles utilisables par les outils d'analyse de code automatique. Un audit ne concerne en général qu'une librairie ou qu'une partie de l'application. (fr)
  • 소프트웨어 코드 감사 (code audit)는 프로그래밍 프로젝트에서 버그, 보안 위반 또는 프로그래밍 규칙을 위배하는 것을 발견하는 것을 목적으로 소스 코드를 종합적으로 분석하는 것이다. 이것은 소프트웨어가 배포되기 전에 오류들을 감소시킬 목적의 방어적 프로그래밍 패러다임의 필수 요소이다. C와 C++ 소스 코드는 감사해야 하는 가장 흔한 코드인 반면, 많은 고수준 프로그래밍 언어들은 잠재적으로 더 적은 취약한 함수들을 갖는다. (ko)
  • 代码审计(Code audit)是一种以发现程序错误,安全漏洞和违反程序规范为目标的源代码分析。它是防御性编程范式的一部分。该范式的目标是在程序发布前减少错误。C和C++源代码是最常见的分析对象,因为其他更高层的语言如Python拥有更少可能存在漏洞的函数(比如不检查边界条件)。 (zh)
dbo:wikiPageID
  • 4692983 (xsd:integer)
dbo:wikiPageLength
  • 5524 (xsd:nonNegativeInteger)
dbo:wikiPageRevisionID
  • 1115014306 (xsd:integer)
dbo:wikiPageWikiLink
dbp:wikiPageUsesTemplate
dcterms:subject
gold:hypernym
rdf:type
rdfs:comment
  • A software code audit is a comprehensive analysis of source code in a programming project with the intent of discovering bugs, security breaches or violations of programming conventions. It is an integral part of the defensive programming paradigm, which attempts to reduce errors before the software is released. C and C++ source code is the most common code to be audited since many higher-level languages, such as Python, have fewer potentially vulnerable functions (e.g., functions that do not check bounds). (en)
  • 소프트웨어 코드 감사 (code audit)는 프로그래밍 프로젝트에서 버그, 보안 위반 또는 프로그래밍 규칙을 위배하는 것을 발견하는 것을 목적으로 소스 코드를 종합적으로 분석하는 것이다. 이것은 소프트웨어가 배포되기 전에 오류들을 감소시킬 목적의 방어적 프로그래밍 패러다임의 필수 요소이다. C와 C++ 소스 코드는 감사해야 하는 가장 흔한 코드인 반면, 많은 고수준 프로그래밍 언어들은 잠재적으로 더 적은 취약한 함수들을 갖는다. (ko)
  • 代码审计(Code audit)是一种以发现程序错误,安全漏洞和违反程序规范为目标的源代码分析。它是防御性编程范式的一部分。该范式的目标是在程序发布前减少错误。C和C++源代码是最常见的分析对象,因为其他更高层的语言如Python拥有更少可能存在漏洞的函数(比如不检查边界条件)。 (zh)
  • En programmation informatique, l'audit de code est une pratique consistant à parcourir le code source d'un logiciel afin de s'assurer du respect de règles précises. L'audit peut avoir un but légal (s'assurer que les licences des différentes parties d'un programme autorisent bien à le distribuer tel quel, ou voir l'audit interne de ReactOS), ou s'assurer de la sécurité du logiciel en testant sa vulnérabilité, ou bien chercher des bugs. Un audit ne concerne en général qu'une librairie ou qu'une partie de l'application. (fr)
rdfs:label
  • Code audit (en)
  • Audit de code (fr)
  • 코드 감사 (ko)
  • 代码审计 (zh)
owl:sameAs
prov:wasDerivedFrom
foaf:isPrimaryTopicOf
is dbo:wikiPageWikiLink of
is foaf:primaryTopic of
Powered by OpenLink Virtuoso    This material is Open Knowledge     W3C Semantic Web Technology     This material is Open Knowledge    Valid XHTML + RDFa
This content was extracted from Wikipedia and is licensed under the Creative Commons Attribution-ShareAlike 3.0 Unported License