My client for this class was Artemis Financial, a financial consulting company that develops individualized financial plans for its clients' savings, retirement, investments, and insurance. Artemis Financial sought to add a file verification step to its web application to ensure secure communications.

I feel I was able to identify false positives when checking for vulnerabilities in the client's project. It's important to code securely to reduce the chance of exposing the code to vulnerabilities.

I felt the most challenging was working with the various libraries to gain insight into the vulnerabilities. Besides the libraries, reading the report was also tricky.

I focused on outdated application libraries as the first means of securing the code base. I then moved on to vulnerabilities that still existed in the current libraries to determine if I needed the library or not. I would want to automate this process in the future with CI/CD.

I ensured the code and application were functional and secure by performing rigorous static and dynamic testing on the code.

I found the Maven Dependency checker tool to be the most helpful.

I will show them before and after reports to showcase how I could secure the code.