Abstract:
Refactoring is the process of restructuring
existing computer code – changing the factoring –
without changing its external behavior. It is a
common approach to producing better quality
software. However, its impact on the security of
programs has received relatively little attention.
Traditionally, security of software is not considered
from the very beginning of a software development
life cycle, and it is only incorporated in the later
stages of development as an afterthought. As a
consequence, there are increased risks of security
vulnerabilities that are introduced into software
coding after refactoring. The proposed system
analyses two versions (before/after code refactoring)
with two methods such as detect code flaw by Viega’s
12 rules and detect vulnerabilities using Access Level
Graphs (ALGs).This approach to automatically code
security assessment and record documents by
comparing consecutive code versions. Using
documented code vulnerabilities facts, developers
will be decide this refactoring is whether code
security level is more or less.
