Security Archives - Page 9 of 12

SQL Injection Hall of Shame updated

Posted on June 3, 2013 by Code Curmudgeon

Just a reminder for those who aren’t aware – I maintain a list here I like to call the “SQL Injection Hall of Shame“....

Development Testing for Compliance Seminar in DC

Posted on May 8, 2013 by Code Curmudgeon

I’m doing a free seminar next week in the DC area “Development Testing can help you comply with government regulations and security guidelines”. Entry...

SSH Tips – How to Login Securely Without a Password

Posted on March 25, 2013 by Code Curmudgeon

SSH is a wonderful tool and will let do do all kinds of amazing things – not to mention that it does them securely....

I Am Positive It Is False

Posted on January 30, 2013 by Code Curmudgeon

Years ago the biggest challenge in static code analysis was trying to find more and more interesting things. In our original CodeWizard product back...

‹ Prev 1 … 7 8 9 10 11 12 Next ›

Definitioner

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
false positive: A result that is incorrect. Strictly speaking, it means that the tool providing the answer got it wrong. Generally it has a broader usage, meaning an error message that the developer doesn't think is important or real, either because of context or misunderstanding by the developer.
data flow analysis (false positive): A result that is incorrect. Strictly speaking, it means that the tool providing the answer got it wrong. Generally it has a broader usage, meaning an error message that the developer doesn't think is important or real, either because of context or misunderstanding by the developer.
flow analysis: A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.
data flow analysis (flow analysis): A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.