Are there any tools to perform a security analysis against .net desktop assemblies and excutables?

2k views Asked by At

Are there any tools to perform a security analysis against .net desktop assemblies and excutables? I used FXCOP and Gendarme but i think they are not sufficient.

1

There are 1 answers

3
jessehouwing On BEST ANSWER

There are a whole bunch of tools that could be used for security scanning your application. These include:

CAT .NET and Veracode act directly on the binaries. the others parse the code as far as I can tell.

Here's an introductory short movie about CAT .NET. To run it from the commandline, you can call the executable from:

C:\Program Files (x86)\Microsoft\CAT.NET

The syntax is as follows:

catnetcmd.exe /file:wildcardexpression /search:pathtodependencies

Note that CAT .NET features a limited set of rules It should be used in conjuction with CodeAnalysis (FxCop) and though it will find additional issues it is by far not as complete as some of the other tools in the list.