Static Code Analysis Tools for Bulletproof Software Security

1 min.

March 30, 2016

Software security is no longer just anti-virus and firewalls.

The cloud today offers plenty of excellent options for software developers to increase user reach and availability, yet while these options are beneficial for marketing and revenue, they create many more possibilities for security holes.

Manual security reviews are useful, but humans are humans after all, and they just aren’t capable of finding every security hole within a large or even midsize application.
According to this list by static code analysis tools provider Checkmarx, there are dozens of tools on the market, and the best way to secure your application is to combine these tools with a human review.

Why? Because while these tools can find most problems, they can sometimes return false positive or false negatives that a human reviewer would actually catch.
Continue reading this article on InfoSecurity.com

Read More

Want to learn more? Here are some additional pieces for you to read.