1

I need to perform a security code review on a huge Swift application. I have done many mobile penetration tests before and some code review but never on iOS Swift Apps. I am primarily looking for information and reference material which will help me answer the two questions:

  1. Could you provide information on how to conduct a source code reviews of Swift and Swift code for security flaws.

  2. What would be a good approach for automating the source code review using either static or dymanic analysis of the source code?

Improve this question
1
  • 6
    The problem is that such questions (both: asking for product recommendations and for references to outside materials) are off-topic here.
    – techraf
    Commented Jul 7, 2016 at 9:14

2 Answers 2

Reset to default
1

I encourage you try out https://www.kiuwan.com It has out of the box custom rules for Swift, it allows for custom rule creation and has scored the highest benchmark on Owasp for SAST vendors. Disclaimer: I work there

Improve this answer
-1

A quick google search brought me to Tailor I have never used it though. Also Hp Fortify and Checkmarx can help scan your code but do involve huge upfront cost.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .