Microsoft Application Inspector: Check open source components for unwanted features

guest · Jan 19, 2020

Microsoft Application Inspector: Check open source components for unwanted features
January 17, 2020
https://www.helpnetsecurity.com/2020/01/17/microsoft-application-inspector/

Want to know what’s in an open source software component before you use it? Microsoft Application Inspector will tell you what it does and spots potentially unwanted features – or backdoors.
About Microsoft Application Inspector

“[...] Recognizing the inherent risks in trusting open source software, we created a source code analyzer called Microsoft Application Inspector to identify ‘interesting’ features and metadata, like the use of cryptography, connecting to a remote entity, and the platforms it runs on,” [...]
Use cases
“Basically, we created Application Inspector to help us identify risky third party software components based on their specific features, but the tool is helpful in many non-security contexts as well,” the developers explained.

Nevertheless, the tool is not meant to replace security static analyzers or security code reviews, but to be used alongside them.
Click to expand...

Microsoft Application Inspector
Website

A software characterization source code analyzer that helps you understand what a program does by identifying interesting features and characteristics using static analysis and a customizable json based rules engine.
Click to expand...

Log in or Sign up

Microsoft Application Inspector: Check open source components for unwanted features

guest Guest

Log in or Sign up

Microsoft Application Inspector: Check open source components for unwanted features

guest Guest

Useful Searches