|
Extend CWE Testing.
Document Compliance.
|
The Common Weakness Enumeration (CWE) standard is used to review software, to improve its security, quality and reliability.
Some CWE rules can be fully tested automatically via static analyzers. At the other extreme are rules that don't apply to C, C++ or Java code.
In the middle are a large number of rules that are most efficiently tested by static analysis augmented by source code analysis and inspection. These are addressed by Imagix 4D, using a CWE guided checklist.
|
|
