Publication

Abstract :

Secure coding is a software development practice of developing software in a way that prevents accidental introduction of security vulnerabilities. In the current environment, there exists some tools like DVWA, WebGoat etc which in one way or another provides test case for certain number of well known vulnerabilities to the user to teach them about the vulnerabilities. The intended audiences of most of those tools are security researchers and not application programmers. This is the primary reason behind the development of our secure coding framework. This paper mainly focuses the deficiencies that the current conventional approach entails, how our secure coding framework rectifies those deficiencies, and finally justifies the major design decisions behind the construction of the framework.