Using the Code Analysis Tool (CAT.NET 2.0) to Identify Security Vulnerabilities
- Posted: Feb 25, 2010 at 12:18 AM
- 9,490 Views
- 4 Comments
Loading User Information from Channel 9
Something went wrong getting user information from Channel 9
Loading User Information from MSDN
Something went wrong getting user information from MSDN
Loading Visual Studio Achievements
Something went wrong getting the Visual Studio Achievements
Right click “Save as…”
Anil Revuru (RV) from Microsoft Information Security, gives a demonstration of the new version of CAT.NET (Code Analysis Tool for .NET) version 2.0. It is a static analysis tool that uses the Phoenix Compiler and its data flow graph.
Anil walks us through the dataflow rules and how it uses the source sink analysis to determine if there is a vulnerability or not. He also explains how the configuration analysis works and walks through the rules where insecure conditions exist. The demo
of the tool shows how the vulnerabilities are detected and how to interpret the results.
To learn more about this application, stay up to date on the latest news by following the Security Tools Team blog.
Watch related webcast
Download: CAT.NET 2.0
Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation,
please create a new thread in our Forums,
or
Contact Us and let us know.
Follow the Discussion
Oops, something didn't work.
What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in. You need to be signed in to Channel 9 to use this feature.What does this mean?
Following an item on Channel 9 allows you to watch for new content and comments that you are interested in and view them all on your notifications page.sign up for email notifications?
At last some Phoenix news ("by proxy"). Downloading...
Can anyone advise where the download for this has gone? The link through to Microsoft Connect is returning 404.
So still noone fixed the download?
Maybe this CAT should run on this blog site to see where links are broken
We were supposed to exit out of the beta with RTM released on MS.COM download center, but we faced some design challenges for external release. You can read more about our efforts on external release at http://blogs.msdn.com/b/securitytools/archive/2010/06/30/cat-net-v2-0-update.aspx.
Remove this comment
Remove this thread
close