Source Code Scanners
Report
Pawel KrawczykFollow
Application Security ConsultantApr. 10, 2011•0 likes•2,698 views
Source Code Scanners
Apr. 10, 2011•0 likes•2,698 views
Download to read offline
Report
Technology
Overview of tools for static code security analysis, with special focus on Yasca. See http://ipsec.pl/ for more details.
Pawel KrawczykFollow
Application Security ConsultantRecommended
Fortify - Source Code Analyzern|u - The Open Security Community
Hp fortify source code analyzer(sca)Nagaraju Repala
Building a high quality+ products with SCASuman Sourav
Introduction to robot frameworkChonlasith Jucksriporn
Software Security Assurance for DevOps - Hewlett Packard Enterprise + Black DuckBlack Duck by Synopsys
TestWorks Conf Robot framework - the unsung hero of test automation - Michael...Xebia Nederland BV
More Related Content
Slideshows for you
Test automation using seleniumTờ Rang
Introduction to Robot Framework (external)Zhe Li
Securing Docker ContainersBlack Duck by Synopsys
Integration Group - Robot Framework OpenDaylight
Robot frameworkboriau
JavaCro'14 - Test Automation using RobotFramework Libraries – Stojan PeshovHUJAK - Hrvatska udruga Java korisnika / Croatian Java User Association
Viewers also liked
use case point estimationعبدالغني الهجار
Hp Fortify PillarEd Wong
![[아꿈사/110514] 멀티코어cpu이야기 시작발표](https://cdn.slidesharecdn.com/ss_thumbnails/110514cpu-110513195354-phpapp01-thumbnail.jpg?width=384&height=256&fit=bounds)
[아꿈사/110514] 멀티코어cpu이야기 시작발표sung ki choi
프로그래머가 몰랐던 멀티코어 CPU 이야기 13, 14장SukYun Yoon
Poster Analysis Source Codekirstysals
Hp Fortify Cloud Application SecurityEd Wong
![[아꿈사/110514] 멀티코어cpu이야기 시작발표](https://cdn.slidesharecdn.com/ss_thumbnails/110514cpu-110513195354-phpapp01-thumbnail.jpg?width=2048&height=1162&fit=bounds)
Similar to Source Code Scanners
FRAUD DETECTION IN ONLINE AUCTIONINGSatish Chandra
.NET Debugging Tips and TechniquesBala Subra
.Net Debugging TechniquesBala Subra
Dot Net CoreAmir Barylko
Joomla Code Quality Control and Automation TestingShyam Sunder Verma
Transforming your Security Products at the EndpointIvanti
More from Pawel Krawczyk
Top DevOps Security FailuresPawel Krawczyk
Authenticity and usabilityPawel Krawczyk
Reading Geek Night 2019Pawel Krawczyk
Effective DevSecOpsPawel Krawczyk
Unicode the hero or villain Pawel Krawczyk
Get rid of TLS certificates - using IPSec for large scale cloud protectionPawel Krawczyk
Recently uploaded
OpenFOAM benchmark for EPYC server: cavity mediumtakuyayamamoto1800
Welcome and State of Apache CloudStack CommunityShapeBlue
NoSQL Database Migration Masterclass - Session 2: The Anatomy of a MigrationScyllaDB
GDSC23 - Info Session GDSC KIET (1).pptxSnehaAggarwal40
Deploying CloudStack with CephShapeBlue
Carrom Pool Mod APK.docxRayJ12
![[KCD GT 2023] Demystifying etcd failure scenarios for Kubernetes.pdf](https://cdn.slidesharecdn.com/ss_thumbnails/wc-kcdgt2023demystifyingetcdfailurescenariosforkubernetes-230819210453-e911a262-thumbnail.jpg?width=2048&height=1162&fit=bounds)
Source Code Scanners
Source code analysis tools Paweł Krawczyk
„ Static analysis is great for catching common errors early ” Brian Chess (Fortify)
Why find bugs early? Applied Software Measurement , Capers Jones, 1996 Building Security Into The Software Life Cycle , Marco M. Morana, 2006 Early code audit
Why find bugs early? Applied Software Measurement , Capers Jones, 1996 Building Security Into The Software Life Cycle , Marco M. Morana, 2006 Pentest Late code audit
Running Yasca
Running Yasca
Yasca reporting
OWASP Code Crawler
Results
Microsoft FxCop
Results
Microsoft CAT.NET
Results