All Questions
Tagged with code-review opensource
6 questions
1
vote
2
answers
256
views
Mitigating security risks of using open-source software
The title sounds like a trolling question but it is not (I'm a huge fan of OSS).
I have a small company with a web app that is undergoing infosec review with a Fortune 100 company. The questions I ...
- 121
3
votes
3
answers
995
views
Basic security checklist for using an open-source library
I've recently started working with web applications, and the ones developed by our team seem to use a lot of external components for different minor functionality (e.g. a scrolling slider bar, a ...
- 4,006
1
vote
2
answers
1k
views
Static code analysis strategies [closed]
Imagine: We have been given the source code of several software programs, some open source, others proprietary. What's the best strategy to analyze the source code in each case?
For example: We know ...
- 147
5
votes
2
answers
2k
views
What are good free opensource tools for helping in manual source code reviews? [closed]
I know tools that help in identifying security vulnerabilities in source code (static analysis tools), like Findbugs for Java or Pixy for PHP, but I would like to know good free opensource tools that ...
- 2,789
8
votes
3
answers
27k
views
Are there any free static analysis tools for C# / .NET code [closed]
A client recently asked me to perform a code review on C# code. As an independent contractor I was wondering what are the automated solutions out there where I would not have to break the bank to ...
- 932
6
votes
3
answers
1k
views
Open source web application penetration testing community
I do web development for a living but my real passion is security. I have worked with countless open source web application/framework and I have found vulnerabilities in most of them. The main cause ...
- 119