Week 5 forum

.docx

School

American Public University *

*We aren’t endorsed by this school

Course

261

Subject

Computer Science

Date

Dec 6, 2023

Type

docx

Pages

Uploaded by ProfResolveJay9

Python modules and how to secure it Modules in Python are just files with the ". py" suffix that contain Python code that may be imported into another Python program. A module may be thought of as a code library or a file containing a group of functions that you want to include in your program. A module helps you to arrange your Python code in a logical manner. The code is easier to comprehend and utilize when it is organized into modules. You may bind and reference a module, which is a Python object with arbitrarily named attributes. Simply said, it's a file that contains Python code. It can define functions, classes, and variables, and can also include runnable code. for example: test.py , is called a module, and its name would be test . Running a scan with Bandit is a straightforward method to identify security flaws and analyze the security posture of your Python code. The Python Packaging Index Hosts Bandit, which is an open-source project (PyPI), is a Python security program that checks every file on your computer. Bandit checks your code for well-known vulnerabilities once you install it for each Python project. It assigns a score to the security risk, ranging from low to high, and shows you which lines of code are causing the issue. Bandit analyzes the Python file and generates a report in the form of an abstract syntax tree. Bandit is a fast, simple, and highly recommended game. Check import paths. An implicit path denotes that the package's address is not specified. As a result, the application makes use of a module with the same name on your system. This might lead to the installation of a malicious software. To prevent such ambiguity, use an absolute route instead. We know the proper package to use and that it has been verified for malicious code simply by using the complete address of the package. This is the most secure option. The position of the module in relation to the current folder is indicated by a relative path.

Use a virtual environment. It's usually a good idea to utilize a virtual environment while developing Python projects since it helps to avoid module conflicts and ensures that the same modules are used in both the local and production environments. Using a virtual environment avoids harmful Python dependencies from being introduced into your applications and then being shipped to production. Because it is separated, if you have harmful packages in your Python environments, utilizing a virtual environment will prevent the same packages from appearing in your Python codebase. Check on string formatting. Python offers some of the most powerful and versatile string formatting techniques, and if you're not cautious, you might wind up with a security risk in your code. If a Python program allows users to control the format string, this can be exploited to leak sensitive information. Check for exploited and malicious packages. To avoid having abused packages in your code, double-check each Python package you are installing and importing. You may also examine your Python dependencies with security tools to see if any packages are vulnerable. Resources Cipot, B. (2022, January 24). Six python security best practices for developers . Application Security Blog. Retrieved December 7, 2022, from https://www.synopsys.com/blogs/software-security/python-security-best-practices/ Goyal, C. (2021, July 8). Python modules: What are modules in Python: Introduction to modules . Analytics Vidhya. Retrieved December 7, 2022, from https://www.analyticsvidhya.com/blog/2021/07/working-with-modules-in-python-must- known-fundamentals-for-data-

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version