INFORMATION SECURITY

CODE CONTRACTS VS INPUT VALIDATION

  • 1 University of Library and Information technology (UNIBIT)

Abstract

The unstoppable growth of security flaws makes the developers more patient in integrating different security defenses in the application development! Most of the security breaches are due to uninformed or unqualified developers! The good part is that Internet provides a large amount of rules/documentations/guidelines/tools free for use to help the developers in their work! But as the coin has two sides each web application needs to provide two parts of security flaws protection. The first level of defense is the well known protection from the outside world, called user input validation! And the second side is to ensure that the application works without a problem! Which means to protect it from inside out by integrating what is called code contracts! Even thought those two types of protection have similar purposes there is a difference which we are going to present in the research!

Keywords

References

  1. Petkova, L., SECURITY STANDARDS in software development, 2017
  2. Petkova, L., HTTP SECURITY HEADERS, 2018
  3. Petkova, L., CONTENT SECURITY POLICY VALIDATION, 2019
  4. Petkova, L., SEO SPAM AND MALWARE, 2019
  5. Petkova, L., SECURITY’S LEAKS IN SEO SPAMMING, 2019
  6. Mackey, Alex, Introducing .NET 4.0: With Visual Studio 2010
  7. Kolev, Rosen, Validation Rule Patterns in C#, FEBRUARY 2018
  8. Roque Alex, Web Application Programming, Lectures, 2016
  9. Code Contracts, Microsoft, May 2018
  10. Code Contracts User Manual, Microsoft Manual, January, 2012
  11. Albahari, Joseph, Code Contracts, 2007-2017
  12. Khorikov, Vladimir, C# code contracts vs input validation, February 2015
  13. Hakan Onur, Code Contracts – A brilliant way to do validation in your code and even do more, November 2010
  14. ICT Security Trends, Willian Dimitrov, Sofia, 2017, Avangard, ISBN 978-619-160-766-2
  15. Software testing, Willian Dimitrov, Sofia, 2017, Avangard, ISBN 978-619-160-765-5
  16. ICT Security Model, Willian Dimitrov, Sofia, 2018, Avangard, ISBN 978-619-160-950-5

Article full text

Download PDF