As nowadays SAAS is becoming popular way of developing and deploying the applications, and I have just started working at a company providing SaaS solution for payment authorization services.
Since past few days, I have been thinking what would happen if some "unsatisfied / angry" developer write a malicious code (lets say deleting transaction table !)which would activate on some particular time (so that it would not be caught during testing process) and can create havoc for any time critical SAAS application. Any good SAAS offering comes with proper backup strategy and hence data restoration could be possible upto certain extent but it would seriously hamper the availibility of system and in turn the image with clients.
Sometimes I think this could be controlled through code reviews but I have seen that most of the times the code reviews are not done properly and such malicious logic can be camouflaged behind some complicated string manipulations.
So I am just boucing my thoughts to community for some good ideas, which could be implemented in development process to catch such malicious activities early on.
P.S. : Sometimes though I am unsatisfied / angry developer but would never do such unethical things being a coding lover.