All-in-One Guides:Web application security -- How to prevent attacks
Prevention techniques for developers-designers
Source code analysis
-
Code analysis: Which tool is right for you?
Ask the Expert - Code scanners are excellent application security tools. Expert Brad Arkin explains which features security professionals should consider when choosing a code analysis tool.
-
Application security increased by static and dynamic code analysis
Tip - Integrating security measures into the software development life cycle (SDLC) is crucial Web application security. One of these measures is source code analysis, which includes both static and dynamic analysis.
-
How static analysis can improve software security
05 Jun 2007
Interview - Fortify's Brian Chess talks about his upcoming book, Secure Programming with Static Analysis, and progress that has been made toward making security part of the software development life cycle (SDLC).
-
Source code analysis part of DoD's app security plan
26 Oct 2006
Article - The U.S. Navy Network Warfare Command's evaluation of Ounce Labs' source code analysis technology showed how a tool such as Ounce could improve the Department of Defense's application security and reduce project costs.
-
Eight reasons to do source code analysis on your Web application
Tip - Source code analysis may sound like a difficult, expensive thing to do. The truth is it's a relatively easy way to ensure your Web application is secure, comply with industry and government regulations, and reduce business risk.
-
Static analysis tool helps software engineers find bugs during builds
03 Sep 2008
Article - Klocwork Insight allows software engineers to view and correct their own code before it's submitted to QA. Mentor Graphics found this static analysis tool's capabilities fit well with agile development practices.
-
What to do after penetration testing: source code analysis
Tip - You may think penetration testing is enough to make sure your Web applications are secure. But source code analysis tools can uncover vulnerabilities that aren't easily found using pen testing. Long skeptical about such tools, security expert Kevin...
-
How source code analysis improves application security
Podcast - New application vulnerabilities are disclosed daily. Many of them, however, can be discovered and resolved through source code analysis. Learn how in this podcast with Denim Group's Dan Cornell.
-
Static Analysis as Part of the Code Review Process -- Chapter 3, Secure Programming with Static Anal
Tip - Static analysis tools can make the code review process more efficient. Learn how, as well as what exactly is involved in a code review, in this excerpt from Secure Programming with Static Analysis.