Re: DOT NET code review

["J. Oquendo" <sil () infiltrated net>]

On Thu, 02 Oct 2008, Mork wrote:

> Hi,
>
> We're doing our Dotnet code review manually. I was wondering if you
> guys know a program that would do a first run through the code to
> facilitate the job.

FXCop
http://www.microsoft.com/downloads/details.aspx?FamilyID=9aeaa970-f281-4fb0-aba1-d59d7ed09772&displaylang=en

SWAAT
http://www.securitycompass.com/inner_swaat.shtml

Otherwise you can visit NIST's site...
https://samate.nist.gov/index.php/Source_Code_Security_Analyzers



=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, CNDA, CHFI, OSCP

"A good district attorney can indict a ham sandwich
if he wants to ... The accusations harm as much as
the convictions ... they're obviously harmful or it
wouldn't be news.." - John Carter

wget -qO - www.infiltrated.net/sig|perl

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AC173DB