d3fend-ontology
d3fend-ontology copied to clipboard
Source Code Hardening
Collection of Source Code Hardening Techniques (address #165). Credit to @rafikap his hard work in producing the majority of this content!
Still a WIP - TODOs:
- Consider if d3f:DeadCodeElim belongs to Source Code Hardening
- Need Data Type PR to merge to add better data artifact relationships in input validation/sanitization
- Consider if the 'Least Privilege Access' concept is captured by 'application configuration hardening'
- Consider how to add a technique on HTTP Request Uniqueness Validation (nonce)
When you can, please confirm what else needs to be done.
Fuzzing may sometimes be used as Source Code Hardening: https://github.com/d3fend/d3fend-ontology/issues/303