Have Geek Brain

Are there any IDE plugins available for scanning while encoding?

There are tools like Fortify that can be integrated with the IDE to scan source codes for security vulnerabilities. But I expect it to be a plugin for an IDE like eclipse that should check for vulnerabilities while typing. (Perhaps in the case of a Java program, for each semicolon (;) it should check for a vulnerability). It would be great if the tool recommends a fix along the way. So that the developer can fix the vulnerabilities as such by fixing compilation issues in eclipse. This would significantly reduce developer time compared to full code review, vulnerability checking, fixing and rechecking of the entire codebase.

Is there such a product on the market already? If not, is it possible to design such a thing?

0


a source to share


3 answers


FindBugs can be made to work in a similar way, perhaps I set it to run every time I compile a new file and it warns of some interesting potential errors. The only plugin I know of this works as you type Checkstyle , so maybe there is a similar plugin that checks for security vulnerabilities?



+1


a source


Cigital.com They have a plugin that works in spell check mode. When you type, it will heavily ignite the vulnerability code. For example, SQL injection, XSS, etc. It works really well and doesn't support your machine resources like other plugins.



+1


a source


You can also check out Ounce Labs and Coverity ...

-1


a source






More articles:


All Articles