Difference between revisions of "Secure coding tools"

From Simson Garfinkel
Jump to navigationJump to search
m
m
Line 9: Line 9:
See also:
See also:
* https://www.cert.org/secure-coding/products-services/scale.cfm?
* https://www.cert.org/secure-coding/products-services/scale.cfm?
* https://www.dhs.gov/science-and-technology/csd-swamp
* https://continuousassurance.org/

Revision as of 14:31, 1 July 2016

C/C++:

  • Clang Thread Safety Analysis
  • Rosecheckers – perform static analysis on C/C++ source
  • Compiler-Enforced Buffer Overflow Elimination

Android:

  • DidFail – uses static analysis to detect potential leaks – Android

See also: