Analysis of Security Assessment in Software Refactoring

Abstract

Refactoring is the process of restructuring existing computer code – changing the factoring – without changing its external behavior. It is a common approach to producing better quality software. However, its impact on the security of programs has received relatively little attention. Traditionally, security of software is not considered from the very beginning of a software development life cycle, and it is only incorporated in the later stages of development as an afterthought. As a consequence, there are increased risks of security vulnerabilities that are introduced into software coding after refactoring. The proposed system analyses two versions (before/after code refactoring) with two methods such as detect code flaw by Viega’s 12 rules and detect vulnerabilities using Access Level Graphs (ALGs).This approach to automatically code security assessment and record documents by comparing consecutive code versions. Using documented code vulnerabilities facts, developers will be decide this refactoring is whether code security level is more or less.