WebApp Sec: Re: Java Security Code Review Tool

[Dhruv Soi <dhruv_ymca () yahoo com>]

My personal experience with Fortify has met the
expectations. So would suggest you to rather then
spending time in trying out all and then to use one.
Better to go with Fortify...

For Code review/development I think it would be better
to follow "Secure Programming" mailing list...

Thanks
Dhruv



--- Stephan <schenette () gmail com> wrote:

> You might want to check out:
>
> Fortify: http://www.fortifysoftware.com/
> JLint: http://artho.com/jlint/
> PMD: http://pmd.sourceforge.net/
> FindBugs: http://findbugs.sourceforge.net/
>
> -Stephan
>
> On 3 Nov 2005 08:00:29 -0000, dharmeshmm () mastek com
> <dharmeshmm () mastek com> wrote:
> > Hi All,
> >
> > Has anybody evaluated any Java Security Code
> Review Tool ?
> > I have come across FxCop and DevPartner which are
> particularly for .NET.
> > Regards,
> > Dharmesh.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com