|
Yasca is an open source program which looks for security vulnerabilities, code-quality, performance, and conformance to best practices in program source code. It leverages external open source programs, such as FindBugs, PMD, JLint, JavaScript Lint, PHPLint, Cppcheck, ClamAV, Pixy, and RATS to scan specific file types, and also contains many custom scanners developed for Yasca. It is a command-line tool that generates reports in HTML, CSV, XML, MySQL, SQLite, and other formats. It is listed as an inactive project at the well-known OWASP security project, and also in a government software security tools review at the U.S Department of Homeland Security web site.〔(【引用サイトリンク】url=https://buildsecurityin.us-cert.gov/swa/downloads/NAVSEA-Tools-Paper-2009-03-02.pdf )〕 ==Languages Scanned== Yasca has at least one scanner for each of the following file types: *.NET (VB.NET, C#, ASP.NET) *ASP *C/C++ *COBOL *ColdFusion *CSS *HTML *Java *JavaScript *Perl *PHP *Python *Raw HTTP Traffic *Visual Basic 抄文引用元・出典: フリー百科事典『 ウィキペディア(Wikipedia)』 ■ウィキペディアで「Yasca」の詳細全文を読む スポンサード リンク
|