This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP O2 Platform/Microsoft/CAT.NET"

From OWASP
Jump to: navigation, search
(description)
(other relevant links)
 
(2 intermediate revisions by the same user not shown)
Line 12: Line 12:
  
 
== download==
 
== download==
* [https://connect.microsoft.com/Downloads/DownloadDetails.aspx?SiteID=734&DownloadID=23328 CAT.NET 2.0 CTP (current version)] (requires registration with Microsoft)
+
* [https://connect.microsoft.com/Downloads/DownloadDetails.aspx?SiteID=734&DownloadID=23328 CAT.NET 2.0 CTP (current version)] (requires registration with Microsoft) , .NET Framework 4.0
* [http://www.microsoft.com/downloads/details.aspx?FamilyId=0178e2ef-9da8-445e-9348-c93f24cc9f9d&displaylang=en CAT.NET v1 CTP - 32 bit (old version)]
+
* [http://www.microsoft.com/downloads/details.aspx?FamilyId=0178e2ef-9da8-445e-9348-c93f24cc9f9d&displaylang=en CAT.NET v1 CTP - 32 bit (old version)] , .NET Framework 2.0
 
* [http://deploy.o2-ounceopen.com/O2_Scanner_MsCatNet/ O2 Scanner - MsCatNet]
 
* [http://deploy.o2-ounceopen.com/O2_Scanner_MsCatNet/ O2 Scanner - MsCatNet]
  
Line 19: Line 19:
 
*  [https://connect.microsoft.com/site/sitehome.aspx?SiteID=734 Microsoft Information Security Tools team Connect site]
 
*  [https://connect.microsoft.com/site/sitehome.aspx?SiteID=734 Microsoft Information Security Tools team Connect site]
 
* [http://msdn.microsoft.com/en-us/security/dd547422.aspx Microsoft IT’s Information Security (InfoSec) group]
 
* [http://msdn.microsoft.com/en-us/security/dd547422.aspx Microsoft IT’s Information Security (InfoSec) group]
 +
* [[:Category:OWASP_.NET_Project|OWASP .NET Project]]
  
 
== related blog posts ==
 
== related blog posts ==
Line 45: Line 46:
 
** [http://channel9.msdn.com/posts/Jossie/Web-Application-Configuration-Analizer-WACA Using Web Application Configuration Analyzer (WACA) - CTP Version]
 
** [http://channel9.msdn.com/posts/Jossie/Web-Application-Configuration-Analizer-WACA Using Web Application Configuration Analyzer (WACA) - CTP Version]
 
** [http://channel9.msdn.com/posts/Jossie/Web-Application-Configuration-Analyzer-WACA Web Application Configuration Analyzer (WACA)]
 
** [http://channel9.msdn.com/posts/Jossie/Web-Application-Configuration-Analyzer-WACA Web Application Configuration Analyzer (WACA)]
{{:OWASP_O2_Platform/WIKI/bottom}}
 
 
** [http://channel9.msdn.com/posts/Jossie/Enhanced-Web-Protection-Library/ Enhanced Web Protection Library]
 
** [http://channel9.msdn.com/posts/Jossie/Enhanced-Web-Protection-Library/ Enhanced Web Protection Library]
 
** [http://channel9.msdn.com/posts/Jossie/Using-the-Web-Protection-Library-WPL-CTP-Version/ Using the Web Protection Library (WPL) - CTP Version]
 
** [http://channel9.msdn.com/posts/Jossie/Using-the-Web-Protection-Library-WPL-CTP-Version/ Using the Web Protection Library (WPL) - CTP Version]
 +
 +
 +
{{:OWASP_O2_Platform/WIKI/bottom}}

Latest revision as of 13:19, 4 December 2009

current O2 support

  • Dedicated O2 Module O2_Scanner_MsCatNet with support for
    • finding target dlls (recursive search on local directories)
    • triggering scans
    • converting CAT.NET Results into O2's Findings schema

description

(from CAT.NET download page)

"...Code Analysis Tool for .NET is a static analysis tool to detect common software security vulnerabilities. CAT.NET 2.0 has been re-written from the ground up implementing the original tainted analysis algorithm developed by Ben Livshits but using the Phoenix compiler infrastructure to provide a solid and scalable core data flow security analysis engine. CAT.NET 2.0 will initially ship around February as a Visual Studio 2010 Power Tool, only available to customers who have a licensed copy of Visual Studio 2010 and then as an integrated part of the Visual Studio product in late 2010. ..."

download

other relevant links

related blog posts

videos



go back to the main OWASP O2 Platform page