Statically scanning Java code: Finding security vulnerabilities

John Viega; Gary McGraw; Tom Mutdosch; Edward W. Felten

doi:10.1109/52.877869

Statically scanning Java code: Finding security vulnerabilities

John Viega, Gary McGraw, Tom Mutdosch, Edward W. Felten

Research output: Contribution to journal › Article › peer-review

29 Scopus citations

Abstract

The source code scanning tool Jslint helps programmers automatically utilize existing security knowledge. The tool identifies insecure coding practices, by scanning for common problems, to prevent bugs familiar to the security community. Java's approach to security includes memory encapsulation techniques and access control mechanisms built on the stack-inspection technique. Developers can use tool on parts of the platform, Java applications, or applet code so that software is likely to contain security-critical bugs.

Original language	English (US)
Pages (from-to)	68-74
Number of pages	7
Journal	IEEE Software
Volume	17
Issue number	5
DOIs	https://doi.org/10.1109/52.877869
State	Published - Sep 2000

All Science Journal Classification (ASJC) codes

Software

Access to Document

10.1109/52.877869

Cite this

@article{053885e36fab432890021d66f539d20d,

title = "Statically scanning Java code: Finding security vulnerabilities",

abstract = "The source code scanning tool Jslint helps programmers automatically utilize existing security knowledge. The tool identifies insecure coding practices, by scanning for common problems, to prevent bugs familiar to the security community. Java's approach to security includes memory encapsulation techniques and access control mechanisms built on the stack-inspection technique. Developers can use tool on parts of the platform, Java applications, or applet code so that software is likely to contain security-critical bugs.",

author = "John Viega and Gary McGraw and Tom Mutdosch and Felten, {Edward W.}",

year = "2000",

month = sep,

doi = "10.1109/52.877869",

language = "English (US)",

volume = "17",

pages = "68--74",

journal = "IEEE Software",

issn = "0740-7459",

publisher = "IEEE Computer Society",

number = "5",

}

TY - JOUR

T1 - Statically scanning Java code

T2 - Finding security vulnerabilities

AU - Viega, John

AU - McGraw, Gary

AU - Mutdosch, Tom

AU - Felten, Edward W.

PY - 2000/9

Y1 - 2000/9

N2 - The source code scanning tool Jslint helps programmers automatically utilize existing security knowledge. The tool identifies insecure coding practices, by scanning for common problems, to prevent bugs familiar to the security community. Java's approach to security includes memory encapsulation techniques and access control mechanisms built on the stack-inspection technique. Developers can use tool on parts of the platform, Java applications, or applet code so that software is likely to contain security-critical bugs.

AB - The source code scanning tool Jslint helps programmers automatically utilize existing security knowledge. The tool identifies insecure coding practices, by scanning for common problems, to prevent bugs familiar to the security community. Java's approach to security includes memory encapsulation techniques and access control mechanisms built on the stack-inspection technique. Developers can use tool on parts of the platform, Java applications, or applet code so that software is likely to contain security-critical bugs.

UR - http://www.scopus.com/inward/record.url?scp=0034270432&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0034270432&partnerID=8YFLogxK

U2 - 10.1109/52.877869

DO - 10.1109/52.877869

M3 - Article

AN - SCOPUS:0034270432

SN - 0740-7459

VL - 17

SP - 68

EP - 74

JO - IEEE Software

JF - IEEE Software

IS - 5

ER -

Statically scanning Java code: Finding security vulnerabilities

Abstract

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this