Survey of Code Review Tools
| Název práce v češtině: | Survey of Code Review Tools |
|---|---|
| Název v anglickém jazyce: | Survey of Code Review Tools |
| Klíčová slova: | code review, source code, analysis |
| Klíčová slova anglicky: | code review, source code, analysis |
| Akademický rok vypsání: | 2010/2011 |
| Typ práce: | diplomová práce |
| Jazyk práce: | angličtina |
| Ústav: | Katedra distribuovaných a spolehlivých systémů (32-KDSS) |
| Vedoucí / školitel: | doc. RNDr. Jan Kofroň, Ph.D. |
| Řešitel: | skrytý - zadáno a potvrzeno stud. odd. |
| Datum přihlášení: | 21.10.2010 |
| Datum zadání: | 21.10.2010 |
| Datum a čas obhajoby: | 05.09.2011 09:30 |
| Datum odevzdání elektronické podoby: | 04.08.2011 |
| Datum odevzdání tištěné podoby: | 05.08.2011 |
| Datum proběhlé obhajoby: | 05.09.2011 |
| Oponenti: | Mgr. Pavel Jančík, Ph.D. |
| Zásady pro vypracování |
| This work will provide a survey of tools aimed at effective source code review with focus on security-related errors. The main goal will be to choose a small set of tools that, after they are applied on the code, give the best results in the sense of improving the security aspects of the software under consideration. The thesis will also contain experiments with application of the selected tools on a non-trivial piece of software to demonstrate the benefits of application of these tools. The results of this survey can be useful for independent security researchers or companies offering security consulting services.
|
| Seznam odborné literatury |
| Mark Dowd, John McDonald, Justin Schuh: Art of Software Security Assessment, The: Identifying and Preventing Software Vulnerabilities. Published Nov 20, 2006 by Addison-Wesley Professional.
Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte: Shellcoder's Handbook, The: Discovering and Exploiting Security Holes. Published August 20, 2007 by Wiley; 2nd edition. Robert C. Seacord: Secure Coding in C and C++. Published Sep 9, 2005 by Addison-Wesley Professional. |