Java SE 8 - Java SE 11 - OpenJDK support for CAST AIP

Mon, 01 Jan 0001 00:00:00 +0000

CAST AIP relies on the use of the Java Runtime Environment (JRE) or the Java Development Kit (JDK) to function and CAST therefore fully understands that the change in Oracle’s licensing policy, will have a significant impact on you, our customers. In short, CAST will continue to support the use of Oracle Java SE 8 for CAST AIP, but CAST will also offer you the option to use Java SE 11 either through Oracle or an OpenJDK provider. In detail:

Supported character sets for all AIP products and tools

Mon, 01 Jan 0001 00:00:00 +0000

Supported languages with Unicode for analysis

The supported languages with Unicode are:

Albanian
Belarusian
Bosnian
Bulgarian
Catalan
Chinese
Croatian
Czech
Danish
Dutch
Estonian
Faroese
Finnish
French
German
English
Greek
Greenlandic Inuktitut
Hungarian
Icelandic
Japanese - note that we do not support:
- EUC-JP
- ISO_2022_JP_3
Irish
Italian
Latvian
Lithuanian
Luxembourgish
Macedonian
Maltese
Moldovan
Norwegian
Polish
Portuguese
Romanian
Russian
Serbian
Slovak
Slovenian
Spanish
Swedish
Turkish
Ukrainian

Any non-supported character that is present in the source code file encoded with one of the supported encodings, will be converted to an arbitrary supported character by CAST. The impact on the analysis result of this conversion depends on the situation in which the conversion occurs and on the character to which the conversion occurred. Therefore, the impact is unpredictable in a general way as for example:

Supported Security Standards

Mon, 01 Jan 0001 00:00:00 +0000

Info

Summary: this page describes the security standards that CAST supports via the standard CAST AIP Quality Model.

Introduction

CAST AIP provides support for a wide range of security rules that are established by leading industry research and standards on security vulnerabilities. These security rules are originated from established standards such as:

Open Web Application Security Project (OWASP) Top 10 - OWASP Top 10 provides a list of the 10 most critical web application security risks.
Common Weakness Enumeration (CWE) Top 25 – CWE/SANS Top 25 Most Dangerous Software Errors is a list of the most widespread and critical errors that can lead to serious vulnerabilities in software.
Payment Card Industry Data Security Standard (PCI DSS) - PCI DSS provides an actionable framework for developing a robust payment card data security process.
Consortium for IT Software Quality (CISQ) / OMG Automated Source Code Security Measure Standard -MITRE has participated in the CISQ initiative to specify an automated source code security measurement standard, derived from the CWE Top 25 by focusing on automatable measurements. Please also refer to MITRE own communication about their work with the CISQ:
- http://cwe.mitre.org/news/index.html#september172015_CWE_Mentioned_in_CISQ_Press_Release_Announcing_New_Specifications_for_Measuring_Structural_Quality_of_Software
- http://cwe.mitre.org/documents/advances_in_information_assuarance_standards.pdf
International Organization for Standardization - ISO-5055 - https://www.iso.org/standard/80623.html

CAST documents its rule sets in the structural rule portal. Rules can be browsed according to the standard they meet:

Other technical information on Documentation - V2

Java SE 8 - Java SE 11 - OpenJDK support for CAST AIP

Supported character sets for all AIP products and tools

Supported languages with Unicode for analysis

Supported Security Standards

Introduction