Further reading

• SEI CERT coding standards: https://www.securecoding.cert.org/confluence/display/seccode/SEI+CERT+Coding+Standards
• ReBulk advanced search tool: https://github.com/Toilal/rebulk
• Security Development Life cycle (SDLC) banned function calls: https://msdn.microsoft.com/en-us/library/bb288454.aspx
• Sensitive information data type: https://docs.microsoft.com/en-us/Exchange/policy-and-compliance/data-loss-prevention/sensitive-information-types?view=exchserver-2019#Taiwan%20National%20ID
• Vulnerable API sample project: https://github.com/rahulunair/vulnerable-api
• SWAMP: https://www.mir-swamp.org
• Sensitive data discovery tool: https://github.com/redglue/redsense
• Secrets Search: https://github.com/securing/DumpsterDiver
• OWASP deserialization cheat sheet: https://www.owasp.org/index.php/Deserialization_Cheat_Sheet