0 votes
in Fortify code scanner by

Data Flow Anlayzer

  • Detects inherent vulnerabilities that involve the undesirable data inputted by the user.
  • Uses Global and Inter-Procedural Taint Propagation Analysis.
  • Detects the flow of data between Source and Sink.

Example:

Consider the scenario of Website which contains the text box for the User to input a String of restricted length.

Data Flow Analyser helps in ensuring that the User has inputted string within that restricted length.

...