1

I need to perform a security code review on a huge Swift application. I have done many mobile penetration tests before and some code review but never on iOS Swift Apps. I am primarily looking for information and reference material which will help me answer the two questions:

  1. Could you provide information on how to conduct a source code reviews of Swift and Swift code for security flaws.

  2. What would be a good approach for automating the source code review using either static or dymanic analysis of the source code?

1
  • 6
    The problem is that such questions (both: asking for product recommendations and for references to outside materials) are off-topic here.
    – techraf
    Jul 7, 2016 at 9:14

2 Answers 2

1

I encourage you try out https://www.kiuwan.com It has out of the box custom rules for Swift, it allows for custom rule creation and has scored the highest benchmark on Owasp for SAST vendors. Disclaimer: I work there

-1

A quick google search brought me to Tailor I have never used it though. Also Hp Fortify and Checkmarx can help scan your code but do involve huge upfront cost.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .