Maqbool Malik and Anil Revuru (RV), from
Microsoft Information Security, talk about the newly designed version of CAT.NET which will be part of the
Assessment & Protection
(A&P) suite.
CAT.NET is a static analysis tool on Visual Studio that helps find vulnerabilities like SQL Injection, CSRF, XSS among others, within managed code. This version is currently a technical preview which works on the command line only though for its release it
will be integrated with Visual Studio's UI under the Code Analysis tab. In this interview you can learn all the new features as well as details on how to provide feedback on the tool.
The CTP (Community Technology Preview) for this tool is available in
Microsoft Connect – Information Security Tools.
Learn more about this tool by reading examples on how to run it by following the
Security
Tools Team blog.
Follow the Discussion
Oops, something didn't work.
What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in. You need to be signed in to Channel 9 to use this feature.What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in and view them all on your notifications page.sign up for email notifications?