CAST Engineering Dashboard - Violations - No Violation - User Input Data Flow Security Metrics

This page provides the possible reason for the No Violation or Decrease in the violations for User Input Data Flow Security metrics.

Below is the step-by-step scenario leading to the problem:

1. Deliver and accept the application.
2. Enable User Input Data Flow security option for J2EE.
3. Launch analysis + snapshot.
4. Open dashboard and search for objects violating security flow.
5. Huge variation (decreased) in the objects violation User Input Data Flow Security or there are no violations for User Input Data Flow Security.

The impact of the problem on the analysis or the dashboard is: Results for security on the dashboard or not correct.

To fix the problem, proceed as follows:

1. Check if there is change in the configuration of the analysis unit.
   1. Removed files.
   2. Versions of the technologies.
2. Check if there is any change in the Execution Unit. If you have split the analysis unit then there will be an impact in the User Input Data Flow Security results.
   1. Data Flow security is based on dynamic links and hence splitting of the analysis units will reduce the scope.

Impact of the solution on the analysis or the dashboard is: The results for security metrics will be correct.

Ticket ID : 5044