RE: malicious code

Maybe, ITS4 will be of some help. It statically scans C/C++ for certain functions and even does some code analysis to determine risk level.

http://www.cigital.com/its4/
http://www.cigital.com/papers/download/its4.pdf

Konstantin

-----Original Message-----
From: Jeff Williams [mailto:jsquared@erols.com] Sent: Saturday, January 25, 2003 2:14 PM To: secprog@securityfocus.com
Subject: malicious code

Does anyone on the list know of any research in detecting "malicious code"
as opposed to simply inadvertent security screwups? Seems to me that the
best attacks would be very difficult to distinguish from a ordinary mistake.

j2 Received on Wed Feb 5 12:14:31 2003