websecurity@lists.webappsec.org

The Web Security Mailing List

View all threads

WASC Announcement: 'Static Analysis Tool Evaluation Criteria' Call For Participants

A
announcements@webappsec.org
Mon, Jun 27, 2011 5:19 PM

The Web Application Security Consortium is pleased to announce a new project "Static Analysis Tool Evaluation Criteria (SATEC)".
Currently WASC is seeking volunteers from various sections of the community including security researchers, academics, vendors,
software developers and security professionals.

A brief description of the project

This project will define a common criteria for evaluation of SAST (Static Application Security Testing) tools for individual
organizations. This evaluation criteria will not include information specific to any vendor nor will it even mention any vendor!
This guide is intended to assist organizations in the procurement of SAST tools.

The project page can be found at
http://projects.webappsec.org/Static-Analysis-Tool-Evaluation-Criteria

If you like to get involved with this project, please contact Sherif Koussa (sherif.koussa (@) gmail.com) .

Regards,

The Web Application Security Consortium is pleased to announce a new project "Static Analysis Tool Evaluation Criteria (SATEC)". Currently WASC is seeking volunteers from various sections of the community including security researchers, academics, vendors, software developers and security professionals. A brief description of the project This project will define a common criteria for evaluation of SAST (Static Application Security Testing) tools for individual organizations. This evaluation criteria will not include information specific to any vendor nor will it even mention any vendor! This guide is intended to assist organizations in the procurement of SAST tools. The project page can be found at http://projects.webappsec.org/Static-Analysis-Tool-Evaluation-Criteria If you like to get involved with this project, please contact Sherif Koussa (sherif.koussa (@) gmail.com) . Regards, - contact_at_webappsec.org http://www.webappsec.org/ The Web Application Security Consortium