Statically scanning Java code: finding security vulnerabilities |
| |
Authors: | Viega J McGraw G Mutdoseh T Felten EW |
| |
Affiliation: | Cigital, Dulles, VA; |
| |
Abstract: | The source code scanning tool Jslint helps programmers automatically utilize existing security knowledge. The tool identifies insecure coding practices by scanning for common problems, to prevent bugs that are familiar to the security community |
| |
Keywords: | |
|
|