Improving security using extensible lightweight static analysis

摘要: Most security attacks exploit instances of well-known classes implementation flaws. Developers could detect and eliminate many these flaws before deploying the software, yet problems persist with disturbing frequency-not because community doesn't sufficiently understand them but techniques for preventing have not been integrated into software development process. This article describes an extensible tool that uses lightweight static analysis to common vulnerabilities (including buffer overflows format string vulnerabilities).