samate.nist.gov

plumhall.com

Plum Hall, Inc. - SSCC: The Plum Hall Safe-Secure C/C++ Project

http://www.plumhall.com/sscc.html

SSCC: The Plum Hall Safe-Secure C/C Project. Before there were ANSI and ISO standards for C and C , Plum Hall was already involved with the evolution of C and C technology in an intensely competitive open marketplace. The absence of any hierarchical oversight has fostered decades of contributions by experts of world-class creativity and skill, but the downside has been that C and C create a disproportionate share of safety and security problems [1]. Concerned about the performance of the software. Th...

capec.mitre.org

CAPEC - Related Activities

http://capec.mitre.org/community/related.html

Common Attack Pattern Enumeration and Classification. A Community Resource for Identifying and Understanding Attacks. Department of Homeland Security National Cyber Security Divisions Build Security In (BSI) Web site, http:/ buildsecurityin.us-cert.gov. Making Security Measurable collection of security standardization organizations, activities, and initiatives, http:/ measurablesecurity.mitre.org. Common Weakness Enumeration (CWE) List of standardized software weaknesses, http:/ cwe.mitre.org.

en.wikipedia.org

Static program analysis - Wikipedia, the free encyclopedia

https://en.wikipedia.org/wiki/Static_code_analysis

From Wikipedia, the free encyclopedia. Redirected from Static code analysis. Is the analysis of computer software. That is performed without actually executing programs (analysis performed on executing programs is known as dynamic analysis. In most cases the analysis is performed on some version of the source code. And in the other cases, some form of the object code. The term is usually applied to the analysis performed by an automated tool. Are also used in the latter case. Tool) to formal methods.

codecurmudgeon.com

Security Resources - The Code Curmudgeon

http://codecurmudgeon.com/wp/security-resources

The following are great places to learn more about software security. If you know of others that should be added, please let me know in the form at the bottom of the page. Put Your Money Under Your Mattress – Curmudgeon Security Tips. Closing the Barn Door – Software Security. EFF Data privacy report for major technology companies. SQL Injection- When Will We Learn? SQL Injection is so “2000-and-late”. Build Security In – Collaborate security effort. SWAMP Software Assurance Marketplace. Mom discovers se...

en.wikipedia.org

Static program analysis - Wikipedia, the free encyclopedia

https://en.wikipedia.org/wiki/Static_analysis_tool

From Wikipedia, the free encyclopedia. Redirected from Static analysis tool. Is the analysis of computer software. That is performed without actually executing programs (analysis performed on executing programs is known as dynamic analysis. In most cases the analysis is performed on some version of the source code. And in the other cases, some form of the object code. The term is usually applied to the analysis performed by an automated tool. Are also used in the latter case. Tool) to formal methods.

en.wikipedia.org

Static program analysis - Wikipedia, the free encyclopedia

https://en.wikipedia.org/wiki/Static_program_analysis

From Wikipedia, the free encyclopedia. Is the analysis of computer software. That is performed without actually executing programs (analysis performed on executing programs is known as dynamic analysis. In most cases the analysis is performed on some version of the source code. And in the other cases, some form of the object code. The term is usually applied to the analysis performed by an automated tool. With human analysis being called program understanding, program comprehension. For example, the foll...

projects.webappsec.org

The Web Application Security Consortium / Web Application Security Scanner Evaluation Criteria

http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria

The Web Application Security Consortium. Web Application Security Scanner Evaluation Criteria. Last edited by Romain Gaucher. 2 years, 6 months ago. Web Application Security Scanner. Download this Document in PDF Format. Download the Evaluation Spreadsheet. List of Web Application Security Scanners. Section 1 - Protocol Support. Section 2 - Authentication. Section 3 - Session Management. Section 4 - Crawling. Section 5 - Parsing. Section 6 - Testing. Section 7 - Command and Control. Section 8 - Reporting.

projects.webappsec.org

The Web Application Security Consortium / Web Application Security Scanner Evaluation Criteria

http://projects.webappsec.org/w/page/13246986/Web-Application-Security-Scanner-Evaluation-Criteria

The Web Application Security Consortium. Web Application Security Scanner Evaluation Criteria. Last edited by Romain Gaucher. 2 years, 6 months ago. Web Application Security Scanner. Download this Document in PDF Format. Download the Evaluation Spreadsheet. List of Web Application Security Scanners. Section 1 - Protocol Support. Section 2 - Authentication. Section 3 - Session Management. Section 4 - Crawling. Section 5 - Parsing. Section 6 - Testing. Section 7 - Command and Control. Section 8 - Reporting.