Content Deep Dive
Juliet C# Benchmark and the SecureString case
Blog post from Sonar
Post Details
Company
Date Published
Author
Gaƫtan Ferry
Word Count
1,413
Language
English
Hacker News Points
-
Summary
In 2023, Sonar's teams worked on improving their SAST benchmarks coverage, including Juliet C# 1.3 from the National Institute of Standards and Technology of the USA. The SecureString test case in Juliet C# showcases an issue where sensitive data is written unprotected in an unsafe location. Microsoft discourages using SecureStrings due to various security vulnerabilities. However, when properly used, they can add some additional security to an application. The idea of tracking sensitive data usage inside a program could represent a nice addition to Sonar's engines.