Python is the most widely used programming language worldwide. Its clear syntax, extensive libraries, and adaptability make it suitable for beginners, researchers, and professionals alike. But security is a growing critical concern for Python code. AI-generated code — is not secure by default and human programmers are no security experts.
A fantastic built in function that can be used in Python is `exec`.
(more…)Python is the most widely used programming language worldwide. Consequently, many programs, even those built on top of FOSS Python modules, are freely available on The Python Package Index (PyPI.org).
Python security is gaining attention due to its rising usage. Python can be considered a secure language, yet Python applications are also susceptible to common security flaws. Researchers, especially security researchers, often exaggerate security risks.
AI generated summaries of scientific papers are often of very limited use.
(more…)The rapid growth and increasing complexity of Python based web applications and systems have made robust security testing more important than ever.
Cybercriminals are constantly evolving their tactics, looking for vulnerabilities they can exploit to steal data or disrupt operations.
Static Application Security Testing (SAST) is a security methodology that analyzes an application’s source code and related artifacts (such as design documents) without executing the code.
For Python applications, specific Python SAST tools, like Python Code Audit, perform an in-depth, automated review of the source code to detect security weaknesses and potential vulnerabilities early in the development lifecycle.
(more…)The rapid growth and increasing complexity of Python based web applications and systems have made robust security testing more important than ever.
Cyber criminals are constantly evolving their tactics, looking for vulnerabilities they can exploit to steal data or disrupt operations. Traditional security testing for Python applications is still complex, time-consuming, and expensive.
(more…)Good measurements for cyber security do not have to be technical. From a defence in depth principle it is recommended to have a mix of various technical and non technical measurements. A healthy distrust in security means never trust software and hardware and take as many measurements to mitigate cyber risks to acceptable levels.
(more…)If you want to keep complexity low and minimize security risks, you always need to decide whether using an external Python library is the right choice.
Practising 0Complexity design principles is never easy. But when it comes to security and minimising dependencies, you should weigh the advantages and disadvantages of using any external Python library.
Don’t get me wrong: many FOSS Python libraries are excellent, well-maintained software and you’d be foolish not to use them when appropriate.
So before using a new module in an MVP, running a quick and simple Static Application Security Test (SAST) on the external Python module will provide valuable information from a security point of view.
(more…)Nobody ever asks for a complex IT solution. We all love simple IT solutions.
(more…)Research learns that businesses frequently choose products with too many features that they later find difficult to use or will not be used at all. Feature rich software products are often fuel for business complexity.
(more…)Simple solutions require very good software. But good software is very challenging. Hard to create and often expensive and complex. But there is good news: For almost every business IT problem good open (FOSS) software exist.
(more…)