Re: Secure Coding - Static Code Analysis Tools

[Dan Otogenick <danotogenick () hotmail com>]

Hi Brad,
You should look at Checkmarx (www.checkmarx.com). They have a very promising product (Cx.. something) that finds 
vulnerabilities with very low false positive. (AFAIK - as opposed to other solutions which their FP ratio makes the use 
of them pretty difficult).
If I am not mistaken, their query technology allows you to even find business logic vulnerabilities, but I am not sure 
of that - I advise you to check this with the company.

Dan
_________________________________________________________________
Windows Live Spaces כבר כאן! תוכל ליצור בקלות אתר אינטרנט אישי משלך.
http://spaces.live.com/signup.aspx