Code Analysis

Having Trouble Meeting Your Deadline?

Get your assignment on Code Analysis  completed on time. avoid delay and – ORDER NOW

Do my paper

I attached the instructions of the assignment and rubric is attached below as well. ONLY NEED TO DO “Common Weakness Enumeration (CWE)” section, so part d. Also, do the part in the presentation. I have attached the code analyzer done in the part before it.

1. Title: Source Code Analysis using Open Source ToolsIntroduction: In this assignment, you will delve into the world of source code analysis, exploring the significance of identifying vulnerabilities and weaknesses in software applications. You will select a source code project from SourceForge and utilize an open source static code analyzer from OWASP’s list. By analyzing the selected source code, applying the analysis tool, and referencing the Common Weakness Enumeration (CWE) database, you will enhance your skills in software security assessment and vulnerability identification. This will be no more than 4 students.Instructions:
   1. Source Code Selection:
      • Choose any open source project from SourceForge (https://sourceforge.net/) that uses a programming language of your choice.
      • Briefly describe the selected project, its purpose, and the programming language it employs.
   2. Static Code Analyzer:
      • Select any non-proprietary or open source static code analyzer from the OWASP list (https://www.owasp.org/index.php/Source_Code_Analysis_Tools).
      • Explain why you chose the specific static code analyzer for this project.
   3. Code Analysis:
      • Download the source code of the chosen project and use the selected static code analyzer to analyze it for vulnerabilities and potential weaknesses.
      • Record a video demonstrating your process of using the static code analyzer. The video should include tool setup, code analysis, and result interpretation.
   4. Common Weakness Enumeration (CWE):
      • Refer to the CWE database (https://cwe.mitre.org/index.html) to identify the specific CWEs associated with any vulnerabilities detected by the code analyzer.
      • Describe the CWEs identified and provide a brief explanation of each.
   5. Presentation and Results:
      • Create a presentation summarizing your project selection, tool choice, analysis process, results, and CWE findings.
      • Share the recorded video on Google Drive and provide the link in your presentation. Make sure permissions are appropriately set to allow viewing.

   Page 2: Rubric

   Criteria	Excellent (5)	Good (4)	Satisfactory (3)	Needs Improvement (2)	Poor (1)
   Source Code Selection	Chose a relevant open source project with clear description and alignment with the assignment	Chose a suitable open source project with a brief description	Chose an open source project, but description lacked clarity	Chose an irrelevant project or did not provide a description	Did not choose a source code project
   Static Code Analyzer	Explained a well-reasoned choice of the static code analyzer based on the project’s characteristics	Explained the choice of the static code analyzer with some reasoning	Explained the choice of the static code analyzer with limited reasoning	Provided an inadequate explanation for the tool choice	Did not explain the choice of the static code analyzer
   Code Analysis Video	Presented a clear and organized video demonstrating the tool setup, code analysis, and result interpretation	Presented a video demonstrating tool setup, code analysis, and results, though some aspects could be clearer	Presented a video demonstrating tool setup and code analysis, but results and interpretation were unclear	Presented a video with significant gaps or inaccuracies in the analysis process	Did not provide a code analysis video
   CWE Identification	Accurately identified CWEs associated with vulnerabilities detected by the code analyzer	Identified relevant CWEs for some vulnerabilities detected	Mentioned a few potential CWEs, but connections to vulnerabilities were unclear	Identified inaccurate or irrelevant CWEs	Did not identify CWEs
   Presentation Quality	Created a well-structured and visually appealing presentation covering all aspects of the assignment	Created a good presentation with clear organization and visuals	Created a presentation with satisfactory organization and visuals	Created a presentation with poor organization and visuals	Did not create a presentation
   Video Sharing	Shared a Google Drive link to the video with appropriate permissions for viewing	Shared a Google Drive link to the video, but permissions were not set correctly	Shared a video link with incorrect permissions or accessibility issues	Provided an incorrect video link or no link at all	Did not share a video link

   Page 3-6: Presentation and ResultsCreate and provide content as per the initial assignment instructions, expanding on each section. Use additional pages if needed.Each students needs to select only one source code.