In your experience are code reviewers sufficiently trained t
In your experience, are code reviewers sufficiently trained to perform code reviews? In software security?
Solution
=>According to my experience . A code reviewer as a freher he is trained for 50 to 60% and remaning
percentage will be learned by his experience
=>AS a fresh code reviewer will be giving smaller task and he will have code review tools to find the falws in the code
as on years going and experience comes on he will entered in to manual code review
=>Mainly the reviewer will check thein the following areas
i)injection flaws
ii)Authentication
iii)Encryption
iv)Auditing and logging
v) insecure configuration
