Source Code Analysis

Outlines what automated security analyzers can do, provides a business case for their use, and provides some criteria for evaluating individual tools. Code samples are provided to run tools against to verify that the tools are able to detect known problems in the code.