Dissecting and Digging Application Source Code for Vulnerabilities

LinuxSecurity.com: Application source code scanning for vulnerability detection is an interesting challenge and relatively complex problem as well. There are several security issues which are difficult to identify using blackbox testing and these issues can be identified by using whitebox source code testing methodlogy. Application layer security issues may be residing at logical layer and it is very important to have source code audit done to unearth these categories of bugs. Any tools which can help make my code more secure I feel is worth looking at. Have you ever used a software application for scanning your source code for vulnerabilities? Do you think they are useful?

Related Items