August 2013

Category //

The AppSec How-to: 10 Steps to Secure Agile Development

In Agile’s fast-paced environment and frequent releases, security reviews and testing sound like an impediment to success. How can you keep up with Agile demands of continuous integration and continuous deployment without abandoning security best practices? Companies have found the following ten

Read More »

SVN Static Code Analysis

Subversion (SVN) is designed to help software developers on collaborative development projects manage their source code. It tracks each commit and the changes within the code so that it’s easy to review the code and ensure that it’s in line … Read More

Read More »

Static Code Analysis with Eclipse

There are several options available for static code analysis within Eclipse and they all come in the form of plugins. Code coverage can be monitored using EclEmma with a straightforward traffic light warning system to deliver a simple report on whether … Read More

Read More »

Static Code Analysis for Java

With so many applications being developed in Java, there’s an acute awareness of the importance of application security, and the best way to integrate security into the software development life cycle is though static code analysis. When it comes to … Read More

Read More »

PHP Static Code Analysis

PHP static code analysis is necessary if you want to ensure that your PHP code will deliver secure applications. There are plenty of options on the market for PHP static code analysis. These include Klocwork, Atlassian, Checkmarx, etc. However, the … Read More

Read More »

Jenkins Static Code Analysis

Jenkins is a simple application designed to keep an eye on a series of executions in a software environment. For example – it works like ‘Cruise Control’ and offers a single simple use continuous system for integration. Developers can then … Read More

Read More »

JavaScript Static Code Analysis

During the development lifecycle, it’s easy for security vulnerabilities to creep into your code. The best way to head this off at the pass and ensure that security remains a priority during the development life cycle is to use static … Read More

Read More »

Hudson Static Code Analysis

Hudson is a Java based tool for continuous integration of software projects. It runs inside a servelet-based container such as GlassFish or Tomcat. It’s designed to deliver a development environment in which builds are quickly and easily compiled, and either

Read More »

GIT Static Code Analysis

GIT enables simultaneous revision of projects. It allows for multiple developers to work on the same fork or different forks of a code and then simultaneously return them all to the same branch when you need to deliver a change. … Read More

Read More »

CVS Static Code Analysis

CVS (Concurrent Versions System) is a system for managing the source code within a development team. It allows for collaborative development by supporting a means of tracking each change made to the source code over any period of time. CVS … Read More

Read More »
Skip to content