From the course: Programming Foundations: Secure Coding

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Dependencies

Dependencies

- Dependency management is often the bane of software engineering. When it comes to security-related topics, it's even more so of a problem. Many times when we write software we could write the most secure code ever and still be susceptible to security vulnerabilities, because of a dependency. We all know the stories of the old and vulnerable component that caused the system its data, or worse all the customer data to be exposed. Some of these leaks have been so bad that they put a large portion of the population at risk for either credit fraud or identity theft. This is something we must always remember when writing software and trying to secure it. So obviously, the exploit is out of our control since we don't own the code. Now, if it's an unpatched defect, we could, of course, fix it ourselves, assuming it's an open source component. However, that still is a process. The reality is however, that many of the vulnerabilities have already been discovered. These discoveries are…

Contents