Table of Contents |
---|
...
New version of CQM, Kiuwan Engine and Kiuwan
...
Insights
Info |
---|
Main features of this release are:
|
...
1. Kiuwan CQM and Engine
Info |
---|
A new version of CQM has been released that incorporate new rules (as detailed below). CQM is the default Model (i.e. a concrete set of active and pre-configured rules):
You can find new rules by comparing this release of CQM against previous version. A detailed description of the behavior of these new rules is available in rule’s description. |
...
OPT.SWIFT.SECURITY.PasteboardCachingLeak
OPT.SWIFT.SECURITY.PasswordInConfigurationFile
OPT.SWIFT.SECURITY.PotentialInfiniteLoop
OPT.SWIFT.SECURITY.URLSchemeHijacking
OPT.SWIFT.SECURITY.HardcodedUsernamePassword
OPT.SWIFT.SECURITY.PlaintextStorageInACookieRule
OPT.SWIFT.SECURITY.SerializableClassContainingSensitiveData
OPT.SWIFT.SECURITY.ThirdPartyKeyboardAllowed
OPT.SWIFT.SECURITY.UncheckedInputInLoopCondition
OPT.SWIFT.SECURITY.ExecutionAfterRedirect
OPT.SWIFT.SECURITY.SensitiveSQL
OPT.SWIFT.SECURITY.SensitiveNoSQL
OPT.SWIFT.SECURITY.InsecureTemporaryFile
OPT.SWIFT.SECURITY.ConnectionStringParameterPollution
OPT.SWIFT.SECURITY.SensitiveCoreData
OPT.SWIFT.SECURITY.PasswordInCommentRule
OPT.SWIFT.SECURITY.HttpParameterPollutionRule
- OPT.SWIFT.SECURITY.NoSQLInjection
Performance Optimization Guide
If you need to optimize the performance of your local analyses, please read Performance Optimization Guide , a practical how-to guide to optimize the performance and memory consumption of Kiuwan local Analyzer.
2. Insights - Component Dependency Tree
Kiuwan Insights incorporates a new view to better understand the external dependencies of your app.
Insights' Component tab let's you now to select a Flat or Tree view of the external components of your application.
...
Butm what if you need to know your "direct" dependencies? That is, to know what components are directly used (called) by your application, and be able to drill-down to view the components indirectly used by your application.
The Tree view allows to view your "direct" dependencies as well as the "indirect" dependencies.
...