demonstrate your understanding of the purpose and application of automated tools (DON'T USE OPEN SOURCE) for secure code implementation

1

Project: Tools for Enforcing Secure Code

Overview

This homework will allow you to demonstrate your understanding of the purpose and application of

automated tools for secure code implementation.

Assignment Details

Conduct an industry survey of commercially available automated tools for enforcing secure code

development and choose one for analysis. Summarize its strengths and weaknesses. Be critical of the

available tools. Select a tool that provides for a free demo version to download.

Either use source code from another course, obtain a sample of code from the Internet, or develop code

to use as the source for the tool. The amount of code should be on the order of 15-30 source

statements. A larger sample is acceptable. Describe the results of applying the tool to the code.

Your report should provide an objective assessment of a commercially available tool. Your report should

be well-organized and provide references for all resources used.

Deliverable

You should create a word or PDF document with your report on the evaluation of a tool to enforce

secure code. The document should be well-written and include references for all sources you used

support your work. Be sure to include your name, date and course number on the document in the title

page.

2

Grading Rubric

Attribute Meets Does not meet

Secure code tools survey 40 points Conducts an industry survey of commercially available automated tools for enforcing secure code development. Summarizes tool strengths and weaknesses. Selects a tool that provides for a free demo version to download.

0 points Does not conduct an industry survey of commercially available automated tools for enforcing secure code development. Does not summarize tool strengths and weaknesses. Does not selects a tool that provides for a free demo version to download.

Analyze code using tool 40 points

Obtains or create source code for

analysis.

Uses at least 15-30 source

statements for the analysis.

Describes the results of applying

the tool to the code.

0 points

Does not obtain or create source

code for analysis.

Does not use at least 15-30 source

statements for the analysis.

Does not describe the results of

applying the tool to the code.

Documentation 20 points Document contains minimal spelling and grammar errors. References included using APA style. Title page includes Name, date and course number.

0 points

Document contains multiple spelling and grammar errors. References were not included. Title page missing or did not include name, date and course number.