Malicious code

The Malicious Code category ensures that best efforts are made to confirm that your code is free of vulnerabilities and unwanted functionality.

This includes ensuring secure and proper handling for malicious activity, no time based attacks, no outbound communications to untrusted destinations, and that no unauthorized or attacker-controlled code is included. This category includes audit or third party libraries from the application codebase.

• Block rooted or jailbroken mobile devices
  Secure your instance by preventing unauthorized access from jailbroken devices.
• Enable Code Signing for application configuration data and scripts [Removed in Security Center 1.3]
  Manage Code Signing for application configuration data and scripts on your instance.
• Disable ServiceNow root of trust [Removed in 1.5]
  Use the com.snc.csf.servicenow_root_of_trust.disabled property to control which build key certificates are trusted on an instance.