今天就学习课程吧!
今天就开通帐号,24,700 门业界名师课程任您挑!
Security audits
- [Instructor] Security audits, should be part of your process. In all aspects, you should make security audits through your code. These audits should be part of the regular code reviews, but also a reoccurring event where you go over the code with a security mindset and try to find issues. Do these reviews not only at the code level, but also at a design and system level. Another aspect is security audit to your logs and metrics. Go over the logs and metrics and try to find anomalies that might be security issues. Once you find these, try to create automatic alerts for them. Another option is penetration testing or pen testing. In pen testing, you hire a team of professionals to try and hack your system. It might be expensive, but maybe not as expensive as a data leak.