Overview of tools for static code security analysis, with special focus on Yasca. See http://ipsec.pl/ for more details.

1. Source code analysis tools Paweł Krawczyk

2. „ Static analysis is great for catching common errors early ” Brian Chess (Fortify)

4. Why find bugs early? Applied Software Measurement , Capers Jones, 1996 Building Security Into The Software Life Cycle , Marco M. Morana, 2006 Early code audit

5. Why find bugs early? Applied Software Measurement , Capers Jones, 1996 Building Security Into The Software Life Cycle , Marco M. Morana, 2006 Pentest Late code audit

12. Running Yasca

13. Running Yasca

15. Yasca reporting

17. OWASP Code Crawler

20. Results

22. Microsoft FxCop

24. Results

25. Microsoft CAT.NET

28. Results