code analysis

Detecting vulnerable code in software dependencies is more complex than it seems

September 18, 2024

In this Help Net Security interview, Henrik Plate, CISSP, security researcher, Endor Labs, discusses the complexities AppSec teams face in identifying vulnerabilities within …

MobSF: Open-source security research platform for mobile apps

March 14, 2024

The Mobile Security Framework (MobSF) is an open-source research platform for mobile application security, encompassing Android, iOS, and Windows Mobile. MobSF can be used for …

RiskInDroid: Open-source risk analysis of Android apps

March 6, 2024

RiskInDroid (Risk Index for Android) is an open-source tool for quantitative risk analysis of Android applications based on machine learning techniques. How RiskInDroid works …

What does optimal software security analysis look like?

August 31, 2023

In this Help Net Security interview, Kevin Valk, co-CEO at Codean, discusses the consequences of relying solely on automated tools for software security. He explains how these …

Facebook open-sources a static analyzer for Python code

August 10, 2020

Need a tool to check your Python-based applications for security issues? Facebook has open-sourced Pysa (Python Static Analyzer), a tool that looks at how data flows through …

Automate manual security, risk, and compliance processes in software development

March 9, 2020

The future of business relies on being digital – but all software deployed needs to be secure and protect privacy. Yet, responsible cybersecurity gets in the way of what any …

Microsoft Application Inspector: Check open source components for unwanted features

January 17, 2020

Want to know what’s in an open source software component before you use it? Microsoft Application Inspector will tell you what it does and spots potentially unwanted …