Security Archives - Page 5 of 6

SQL Injection is So “2000-and-Late”

Posted on July 17, 2012 by Code Curmudgeon

I’m kind of surprised, or at least disappointed that we are still talking about SQL injection breaches. About a year ago I wrote about...

Top 10 User Mistakes with Static Analysis

Posted on April 12, 2012 by Code Curmudgeon

I recently attended the Static Analysis Tool Exposition (SATE) IV Workshopsponsored by NIST. The goals of SATE are to: Enable empirical research based on...

Going with the Flow in Static Analysis

Posted on October 3, 2011 by Code Curmudgeon

As part of my ongoing series about Static Analysis issues I want to talk about the relationship between the traditional static method and the...

‹ Prev 1 … 3 4 5 6 Next ›

Definitioner

CAN (Controller Area Network): Controller Area Network aka CAN aka CAN Bus is a wiring standard for vehicles that enables communication between various components and devices without having a host computer. For example doors, brakes, transmission.
flow analysis: A form of static analysis that works by analyzing software by tracing data flows and paths that might be used when running the application. It can find weaknesses, but is subject to false positive results because the paths and data it finds my be improbable or impossible.
BASIC: Beginners All Purpose Symbolic Instruction Code. A programming language designed specifically for beginners.
pattern-based analysis: A form of static analysis where patterns of either good or bad code are stored as rules and compared against a code base without executing the code, to find potential violations.
static analysis: Any form of software analysis that can be done on the code without actually executing the code. Encompasses techniques like pattern-based analysis, metrics, code review, etc.