Re: Your opinion on a valuable and feasible goal for a new source code auditing tool
Jose Nazario <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
have a look at CQUAL, it does sort of what you want to do (taint checking). while it does a good job, it's not terribly easy to do. you could marry flow control analysis to input tagging and tracking and essentially make it easier for the developer to use. ________ jose nazario, ph.d. [email protected] http://monkey.org/~jose/ http://infosecdaily.net/