Source Code Analysis Laboratory (SCALe)
• Technical Note
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2012-TN-013Subjects
Abstract
The Source Code Analysis Laboratory (SCALe) is a proof-of-concept demonstration that software systems can be conformance tested against secure coding standards. CERT® secure coding standards provide a detailed enumeration of coding errors that have resulted in vulnerabilities for commonly used software development languages. The SCALe team at the CERT Program, part of Carnegie Mellon University’s Software Engineering Institute, analyzes a developer’s source code and provides a detailed report of findings to guide the code’s repair. After the developer has addressed these findings and the SCALe team determines that the product version conforms to the standard, the CERT Program issues the developer a certificate and lists the system in a registry of conforming systems. This report details the SCALe process and provides an analysis of selected software systems.
Part of a Collection
SCALe Collection
Cite This Technical Note
Seacord, R., Dormann, W., McCurley, J., Miller, P., Stoddard, R., Svoboda, D., & Welch, J. (2012, April 1). Source Code Analysis Laboratory (SCALe). (Technical Note CMU/SEI-2012-TN-013). Retrieved April 18, 2024, from https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/.
@techreport{seacord_2012,
author={Seacord, Robert and Dormann, William and McCurley, Jim and Miller, Philip and Stoddard, Robert and Svoboda, David and Welch, Jefferson},
title={Source Code Analysis Laboratory (SCALe)},
month={Apr},
year={2012},
number={CMU/SEI-2012-TN-013},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/},
note={Accessed: 2024-Apr-18}
}
Seacord, Robert, William Dormann, Jim McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch. "Source Code Analysis Laboratory (SCALe)." (CMU/SEI-2012-TN-013). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, April 1, 2012. https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/.
R. Seacord, W. Dormann, J. McCurley, P. Miller, R. Stoddard, D. Svoboda, and J. Welch, "Source Code Analysis Laboratory (SCALe)," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Note CMU/SEI-2012-TN-013, 1-Apr-2012 [Online]. Available: https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/. [Accessed: 18-Apr-2024].
Seacord, Robert, William Dormann, Jim McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch. "Source Code Analysis Laboratory (SCALe)." (Technical Note CMU/SEI-2012-TN-013). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 1 Apr. 2012. https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/. Accessed 18 Apr. 2024.
Seacord, Robert; Dormann, William; McCurley, Jim; Miller, Philip; Stoddard, Robert; Svoboda, David; & Welch, Jefferson. Source Code Analysis Laboratory (SCALe). CMU/SEI-2012-TN-013. Software Engineering Institute. 2012. https://insights.sei.cmu.edu/library/source-code-analysis-laboratory-scale/