If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Static Code Analysis for Security

Smoggy · 2014-11-25 16:16:55

Hi Guys, I'm looking to see if there are any static code analysis tools that look into security, specifically for : http://msdn.microsoft.com/en-us/library/d55zzx87(v=vs.90).aspx We are mainly winforms, so I would like a tool that covers both win and web forms in .Net. Has anyone used such as tool ? Thanks

Options

25-11-2014 5:16pm

#1

Smoggy

Registered Users Posts: 1,466 ✭✭✭

Join Date: January 2006

Posts: 1205

Hi Guys,

I'm looking to see if there are any static code analysis tools that look into security, specifically for :

http://msdn.microsoft.com/en-us/library/d55zzx87(v=vs.90).aspx

We are mainly winforms, so I would like a tool that covers both win and web forms in .Net.

Has anyone used such as tool ?

Thanks

0

Comments

Options
#2 27-11-2014 12:20pm
Sean^DCT4

Registered Users Posts: 527 ✭✭✭

Join Date: July 2003

Posts: 421

Have you tried FxCop: http://www.microsoft.com/en-us/download/details.aspx?id=6544 ?

Taken from MS site:

FxCop is a tool that performs static code analysis of .NET code. It provides hundreds of rules that perform various types of analysis.
Design
Globalization
Interoperability
Maintainability
Mobility
Naming
Performance
Portability
Reliability
Security
Usage

0
Options
#3 28-11-2014 1:15pm
Smoggy

Registered Users Posts: 1,466 ✭✭✭

Join Date: January 2006

Posts: 1205

Thanks, I think FXCop is a TeamCity Plugin for the CI Server.. Great heads up !

0