
Challenge
The main touchpoint of the cooperation with the manufacturing company is the execution of code auditing of the existing desktop application. The aim is to review and identify potential vulnerabilities, security breaches, issues, and problem areas, as well as to execute the assessment of code quality and compliance with code standards, etc. The desktop app is the simulation solution to model & analyze the behavior of aircraft and spacecraft during the design phase, operation, and performance.
The main touchpoint of the cooperation with the manufacturing company is the execution of code auditing of the existing desktop application. The aim is to review and identify potential vulnerabilities, security breaches, issues, and problem areas, as well as to execute the assessment of code quality and compliance with code standards, etc. The desktop app is the simulation solution to model & analyze the behavior of aircraft and spacecraft during the design phase, operation, and performance.
Solution
The examination of code was executed based on general Microsoft recommendations of WPF apps, general architecture principles, code styling, and Clean Code concepts. In other words, the team during the audit code activities took into account the following aspects:
- Code architecture. The examination of code architecture by the WPF software architects is the main part of the code audit, as it directly impacts the solution’s security, maintainability, and alignment with the main business goals.
- Code quality. Code consistency, coding style, code readability, and compliance with the best practices & standards
- Security
- Performance
- Testing (test coverage and test quality)
- Compliance with regulations & standards
The team that was responsible for code auditing checked all the upper-listed points and created a detailed report with a list of findings & recommendations.
The examination of code was executed based on general Microsoft recommendations of WPF apps, general architecture principles, code styling, and Clean Code concepts. In other words, the team during the audit code activities took into account the following aspects:
- Code architecture. The examination of code architecture by the WPF software architects is the main part of the code audit, as it directly impacts the solution’s security, maintainability, and alignment with the main business goals.
- Code quality. Code consistency, coding style, code readability, and compliance with the best practices & standards
- Security
- Performance
- Testing (test coverage and test quality)
- Compliance with regulations & standards
The team that was responsible for code auditing checked all the upper-listed points and created a detailed report with a list of findings & recommendations.
Results
The code audit successfully executed the examination and evaluation of the desktop application code. The code review document outlined the feedback about the status of the code of the existing system, including its positive characteristics, applied concepts, and approaches. Above all the report included the list of findings (e.g. violations of coding standards, vulnerabilities, bottlenecks, bugs, etc.). The findings included detailed explanations of the concerns. Together with each finding the team provided recommendations and suggestions. Additionally, the code audit report included the evaluation of code quality and test coverage.
The code audit successfully executed the examination and evaluation of the desktop application code. The code review document outlined the feedback about the status of the code of the existing system, including its positive characteristics, applied concepts, and approaches. Above all the report included the list of findings (e.g. violations of coding standards, vulnerabilities, bottlenecks, bugs, etc.). The findings included detailed explanations of the concerns. Together with each finding the team provided recommendations and suggestions. Additionally, the code audit report included the evaluation of code quality and test coverage.