RE: Linux Free Software Auditing

>
> Can anyone tell me some references (sites, articles) about Linux free software auditing ?
>
> I need procedures, tools, tips to verify the software security (source and binary format) and avoid malicious behaviour like not authorized network connections, suspect syscalls, ...
>  
> Thanks.

I assume that you are primarily looking for automated audit tools.  For
manual auditing there is plenty of information available (a good place
to start is the Exploiting Software and Security Warrior books.)

Here is a good overview of the different automated source code auditors
available on linux:

http://www.linuxjournal.com/article/5673

Of the three reviewed, I have only used RATS, and I am fairly pleased
with it.  Remember, these tools are language-specific.

I am not aware of any automated binary auditing software that is
available.

Remember, no automated procedure can replace a skilled manual audit.

Keith Bucher