Application security code analysis: a step towards software assurance

摘要: The last few years have witnessed a rapid growth in cyber attacks, with daily new vulnerabilities being discovered computer applications. Various security-related technologies, e.g., anti-virus programs, Intrusion Detection Systems (IDSs)/Intrusion Prevention (IPSs), firewalls, etc., are deployed to minimise the number of attacks and incurred losses. However, such technologies not enough completely eliminate some extent; they can only them. Therefore, software assurance is becoming priority an important characteristic development life cycle. Application code analysis gaining importance, as it help writing safe during phase by detecting bugs that may lead vulnerabilities. As result, tremendous research on has been carried out industry academia there exist many commercial open source tools approaches for this purpose. These their own pros cons. main objective article explore state-of-the-art major which benefit security professionals, but also novice Information Technology (IT) professionals. We study techniques under basic four types (Static Source Code (SSC), Static Binary (SBC), Dynamic (DSC) (DBC) analysis) briefly discuss