Microsoft

Microsoft Source Code Analyzer for SQL Injection

Share
Language:
English
Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks.
  • Details

    File name:
    Date Published:

    msscasi_asp_pkg.exe

    7/11/2008

    Version:
    File size:

    1.3

    2.0 MB

      In response to the recent mass SQL injection attacks, Microsoft has developed a new static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Web developers can run the tool on their ASP source code to identify the root cause of the attack and address them to reduce their exposure to future attacks. The tool will scan ASP source code and generate warnings related to first order and second order SQL Injection vulnerabilities. The tool also provides annotation support that can be used to improve the analysis of the code.
  • System Requirements

    Supported Operating System

    Windows Server 2003 Service Pack 1, Windows Server 2008, Windows Vista, Windows XP Service Pack 2

      • .NET framework 2.0
  • Install Instructions

      Perform the following steps to download and install the Microsoft Source Code Analyzer for SQL Injection:

      1. Download msscasi_asp_pkg.exe to a temporary directory.

      2. Run msscasi_asp_pkg.exe.

      3. Enter an installation directory when prompted.

      4. After extracting the files, read the usage section of the Readme.htm file for next steps.

  • Related Resources

Popular downloads

Free PC updates

  • Security patches
  • Software updates
  • Service packs
  • Hardware drivers
Run Microsoft Update
close
moreinfo