7/31/2019 Source Code Analysis Laboratory (SCALe)

1/55

http://www.cert.org/

7/31/2019 Source Code Analysis Laboratory (SCALe)

2/55

mailto:permission@sei.cmu.edu

7/31/2019 Source Code Analysis Laboratory (SCALe)

3/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

4/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

5/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

6/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

7/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

8/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

9/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

10/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

11/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

12/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

13/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

14/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

15/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

16/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

17/55

http://www.rosecompiler.org/compass.pdfhttp://www.opensource.org/licenses/bsd-license.php

7/31/2019 Source Code Analysis Laboratory (SCALe)

18/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

19/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

20/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

21/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

22/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

23/55

http://www.klocwork.com/solutions/security-coding-standards/http://www.ldra.com/certc.asp

7/31/2019 Source Code Analysis Laboratory (SCALe)

24/55

http://caca.zoy.org/wiki/zzuf

7/31/2019 Source Code Analysis Laboratory (SCALe)

25/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

26/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

27/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

28/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

29/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

30/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

31/55

http://www.ini.cmu.edu/degrees/psv_msit/course_list.htmlhttps://www.securecoding.cert.org/confluence/display/sci/15392+Secure+Programminghttp://www.sei.cmu.edu/training/p63.cfm

7/31/2019 Source Code Analysis Laboratory (SCALe)

32/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

33/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

34/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

35/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

36/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

37/55

http://www.minitab.com/en-US/products/minitab/default.aspx

7/31/2019 Source Code Analysis Laboratory (SCALe)

38/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

39/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

40/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

41/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

42/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

43/55

https://www.securecoding.cert.org/registry

7/31/2019 Source Code Analysis Laboratory (SCALe)

44/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

45/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

46/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

47/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

48/55

http://www.opengroup.org/consortia_services/certification.htmhttp://www.saic.com/infosec/testing-accreditation/scap.htmlhttp://www.icsalabs.com/http://www.veracode.com/

7/31/2019 Source Code Analysis Laboratory (SCALe)

49/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

50/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

51/55

http://www.icsalabs.com/about-icsa-labshttp://cve.mitre.org/docs/vuln-trends/vuln-trends.pdfhttps://www.securecoding.cert.org/confluence/x/Uxhttps://www.securecoding.cert.org/confluence/x/fQIhttps://www.securecoding.cert.org/confluence/x/HQEhttp://www.ashling.com/technicalarticles/APB201-TestbedDescription.pdfhttp://www.ashling.com/technicalarticles/APB201-TestbedDescription.pdfhttp://www.anab.org/media/9593/valueofaccreditedcertification.pdf

7/31/2019 Source Code Analysis Laboratory (SCALe)

52/55

http://www.iarpa.gov/Stonesoup_Proposer_Day_Brief.pdfhttp://www.open-std.org/JTC1/SC22/wg14/www/docs/n1124.pdf

7/31/2019 Source Code Analysis Laboratory (SCALe)

53/55

http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1350.htmhttp://www.opengroup.org/consortia_services/certification.htm

7/31/2019 Source Code Analysis Laboratory (SCALe)

54/55

7/31/2019 Source Code Analysis Laboratory (SCALe)

55/55