Official website of the Department of Homeland Security
This document is part of the US-CERT website archive. These documents are no longer updated and may contain outdated information. Links may also no longer function. Please contact info@us-cert.gov if you have any questions about the US-CERT website archive.
Source Code Analysis
Outlines what automated security analyzers can do, provides a business case for their use, and provides some criteria for evaluating individual tools. Code samples are provided to run tools against to verify that the tools are able to detect known problems in the code.
| Title |
Updated date |
Authors |
|---|---|---|
| Source Code Analysis Tools - Overview | 2013-05-14 | C.C. Michael, Steven Lavenhar |
| Source Code Analysis Tools - Example Programs | 2013-05-13 | Howard F. Lipson |
| Source Code Analysis Tools - References | 2013-05-13 | Howard F. Lipson |
| Source Code Analysis Tools - Business Case | 2005-09-28 | Steven Lavenhar, C.C. Michael |