All software projects are guaranteed to have one artifact in common: source code. Together with architectural risk analysis, code review for security ranks very high on the list of software security best practices. Here, we’ll look at how to automate source-code security analysis with static analysis tools.

Authors: Brian Chess, Gary McGraw
Published: IEEE Computer Society, 2004