Hi guys,
While working on the workshop (the audit thingy) I've found an interesting
website that describes different types of security bugs, it's available here:
http://vulncat.fortifysoftware.com/index.html
One interesting thing it that it also includes code snippets and they have
also made a benchmark available for source code analyzers. They have
applied this benchmark to Flawfinder, RATS, PREfast, and CCA. Results
(and source code used with example of vulnerable applications) are available
at
http://vulncat.fortifysoftware.com/benchmark/index.html
I think it will be useful to have as a reference. Regards
Javier
signature.asc
Description: Digital signature
_______________________________________________
Debian-audit mailing list
Debian-audit@xxxxxxxxxxxxx
http://shellcode.org/mailman/listinfo/debian-audit
| 
