HITBSecConf2006 Presentation - What application security tools vendors dont want you to know and holes they will never find!
565e1e3b88632ae0122d2200a59eda6fec8c0e3a0c5a35dc3546d8ede2da7f4e
ITS4 is a command-line tool for statically scanning C and C++ source code for security vulnerabilities. ITS4 scans through source code for potentially dangerous function calls that are stored in a database. Anything that is in the database gets flagged. ITS4 tries to automate a lot of the grepping usually done by hand when performing security audits.
eda8d0762c06c5ed9847ce9f0187e7f3c53a4cd482084ddf434522078030e383
ITS4 is a command-line tool for statically scanning C and C++ source code for security vulnerabilities. ITS4 scans through source code for potentially dangerous function calls that are stored in a database. Anything that is in the database gets flagged. ITS4 tries to automate a lot of the grepping usually done by hand when performing security audits.
4f3470bd8a732a09f17144b08fa4ad2594e198f6a2e9af019b394c95c6d94fc1