[Autogenerated] in this course we covered only the basic
security related tasks for summer cube.
You learned how to install solar cube create the project.
Configure sonar for your project,
run an analysis and interpret the results in the context of
the miter attack framework minor C W E and a WASP but there
are tons more tasks to master.
So now a cube is very extensible as long as you can define
your own rules and package them in a plug in.
You can leverage Sona cuba against any cold pace to detect whatever
you want in source code of course as with any plug in architecture
there is tons of plugins already written and published here are some
resources that would be tremendously useful on your journey of
mastering Sona cube.
Here's the RL within Sona cube that you can leverage the
browse plugins that are already available,
upgrade existing plugins to get more features and all rules and remove
plugins that are no longer supported and here's the navigation path for
your reference here you can browse by category and this is the
documentation that covers the basics of implementing your own plugins
that contain your own rules.
Note the reference to the sample custom plugin example in GitHub Use it
as a guide to developing your custom plugins and if you need more
powerful rules you can grab sonar cube developer edition that offers
advanced detection of security vulnerabilities this carousel shows
screenshots with great samples,
there's also another documentation resource that allows you
to browse the rules based on type here,
we can see the subset of Java rules that pertain to security.
I have selected the OS filter to achieve just that of course you
can select any of the other filters based on your needs and can
further filter by name using keywords.
For example,
if I just type here http you can see the initial set of 86 security
related rules was reduced to just 12 that contain the term HTTP in the
title or the body of the vulnerability or hotspot.
Finally, if you want to learn more about miter attack and its tactics,
techniques and procedures or T T P S classification,
please refer to this link as the entry point into minor attacks documentation
look for techniques and procedures that relate to application,
security analysis and detection.
Search for terms such as sequel injection,
cross site scripting or X S S for short and identity
secrets broken authentication, etc Well this is it.
Thank you for joining me on an exciting and eventful journey during this course.
I can't wait to see you again in the future during my other courses
on Pluralsight I also have a parting request.
If you enjoyed this course,
please give it a quick rating and review before you move on.
Thank you in advance for your kindness until we meet again.
I wish you well