Application Security
ASVS 5.0 V17.2.4: Keep Media Flowing Through Malformed SRTP Packets
ASVS V17.2.4 requires the media server to keep processing media when malformed SRTP packets arrive. Defensive parsing and a fuzzing test.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V17.2.3: Verify SRTP Authentication at the Media Server
ASVS V17.2.3 requires the media server to check SRTP authentication so injected RTP packets cannot disrupt or alter streams. Test steps included.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V17.2.2: Use Approved DTLS Ciphers and SRTP Profiles
ASVS V17.2.2 wants your media server limited to approved DTLS cipher suites and a secure DTLS-SRTP protection profile. How to set and check it.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V17.2.1: Manage and Protect Your DTLS Certificate Key
ASVS V17.2.1 says the DTLS certificate key must follow your documented key management policy. Generation, storage, rotation and how to check it.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V17.1.2: Keep Your TURN Server From Running Out of Ports
ASVS V17.1.2 requires a TURN server that survives users opening huge numbers of ports. Quotas, port ranges and a load test.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V17.1.1: Block Reserved IP Ranges on Your TURN Server
ASVS V17.1.1 says a TURN server must not relay to internal, loopback or other special purpose addresses, IPv4 or IPv6. Coturn config and tests.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V16.5.4: Define a Last Resort Error Handler
ASVS V16.5.4 requires a global handler that catches every unhandled exception, keeps the error details in logs and keeps the process alive.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V16.5.3: Fail Securely and Never Fail Open
ASVS V16.5.3 requires graceful, secure failure on exceptions, so a validation error never lets a transaction go through. Patterns and tests.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V16.5.2: Stay Secure When External Resources Fail
ASVS V16.5.2 asks the app to keep operating securely when a dependency fails, using circuit breakers or graceful degradation. Patterns, code and tests.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.