Secure Code
Git
<versioning control />
distributed version control system primarily used for tracking changes in source code during software development.
by Linus Torvalds in 2005
What is...
Git.... ?
the concept: stream of snapshot
What is...
different between others.. ?
Git basically takes a picture of what all your files look like at that moment and stores a reference to that snapshot. To be efficient, if files have not changed, Git doesn’t store the file again, just a link to the previous identical file it has already stored.
commit SHA : 67b70ef8c1929ec2214a8d92506fd3fc6d98ac1b
Hows that Work...
git flows
commited SHA : 67b70ef8c1929ec2214a8d92506fd3fc6d98ac1b
some changes
modified files
modified files
staged files
staged files
commited
commited SHA is reference by small thing of changes and become a new snapshot.
Reproduce...
standart versioning
development
staging / pre-prod / (uat/sit) / testing
production / stable / Release / LTS
Q-A/C
<Quality Assurance or Control />
QA aims to prevent defects from occurring by focusing on improving processes and systems.
QC focuses on ensuring the final product or system meets quality standards and users expectations.
What is...
Quality Assurance/Control.... ?
Sonarqube





STest
<Stress Testing />
a method used to assess the performance and stability of a system or application under extreme conditions or workloads.
What is...
Stress Testing.... ?
Pros:
- Identifies System Limits
- Reveals Bottlenecks
- Prepares for Peak Usage
Cons:
- May Cause Downtime
- Resource Intensive (High load resources)
The Pro's and Cons
Stress Testing....
- k6
- Stress-ng
- Loader.io
Tools
Stress Testing....
Pentest
<Penetration Testing />
is a simulated cyberattack against a system to evaluate its security. The goal is to identify and exploit vulnerabilities before malicious attackers can do so.
What is...
Penetration Testing.... ?
- Identify vulnerabilities
- Assess the impact
- Test the effectiveness
- Provide actionable insights
Objective
Penetration Testing.... ?
- SQLinjectoin
- Cross Site Scripting (XSS)
- Un-validated Form Control
- Leak Permissions (777)
- Misleading Code-Logic
Common Case
Penetration Testing.... ?
Preventions
<Server-Side />

Terimakasih.
Git
By Abas Kankuu
Git
- 4