“Draft:Application Inspector”的意思、由来-开放百科全书

词条

Draft:Application Inspector

释义

History
Applications
References

{{AFC submission|t||ts=20190403162221|u=Appsecninja|ns=118|demo=}}{{Infobox software
| developer = Positive technologies
| status = Active
| operating system = Windows
| genre = static code analysis
| license = Proprietary
| website = www.ptsecurity.com/ww-en/products/ai/
}}

Application Inspector is a source code analysis tool developed by Positive Technologies. The tool combines dynamic code analysis and static code analysis based on Abstract interpretation^[1]. It enables security specialists and software engineers find and verify security vulnerabilities in source code written in Java (including JSP and JSF),C#, VB.Net, ASP.NET, PHP, JavaScript, Objective-C, Swift, C\\C++, SQL (PL/SQL. T-SQL. MySQL), HTML5 and more.

History

The first release of Application inspector was in the end of 2014. Since 2017 Application Inspector started featuring in Gartner Magic Quadrant for Application Security Testing^[2]. Since 2018 Application Inspector is supporting C\\C++ and languages used in mobile applications.

Applications

Application Inspector is one of the tools featured in the Open Web Application Security Project (OWASP) source code analysis tools list^[3]
It is also featured on the National Institute of Standards and Technology list of Source Code Security Analyzers^[4]
An open source version of the pattern matching engine used in the tool is available in github repository^[5].

References

1. ^https://kochetkov.github.io/sast-theory-practice-and-prospects-en.html
2. ^https://www.gartner.com/doc/3868966
3. ^https://www.owasp.org/index.php/Source_Code_Analysis_Tools
4. ^https://samate.nist.gov/index.php/Source_Code_Security_Analyzers.html
5. ^https://github.com/PositiveTechnologies/PT.PM

Category:Static program analysis toolsCategory:Software testing toolsCategory:Software metricsCategory:Software quality

随便看

开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。