Created by N Padmavathi, last modified by James Hurrell on Mar 03, 2023
This documentation is not maintained. Please refer to doc.castsoftware.com/technologies to find the latest updates.


Summary: this document provides information about the extension offering additional JEE rules.

Extension ID

com.castsoftware.jeerules

What's new?

Please see JEE Rules - 1.4 - Release Notes for more information.

Description

In what situation should you install this extension?

This extension provides additional rules for JEE technology and related Frameworks supported by the JEE Analyzer. These rules are compliant with CWE and OWASP TOP 10 Standards for Security. These rules are in addition to other rules provided for JEE (see JEE - Structural rules).

Structural rules

The following structural rules are provided:

1.4.4-funcrelhttps://technologies.castsoftware.com/rules?sec=srs_jeerules&ref=||1.4.4-funcrel
1.4.3-funcrelhttps://technologies.castsoftware.com/rules?sec=srs_jeerules&ref=||1.4.3-funcrel
1.4.2-funcrelhttps://technologies.castsoftware.com/rules?sec=srs_jeerules&ref=||1.4.2-funcrel
1.4.1-funcrelhttps://technologies.castsoftware.com/rules?sec=srs_jeerules&ref=||1.4.1-funcrel
1.4.0-funcrelhttps://technologies.castsoftware.com/rules?sec=srs_jeerules&ref=||1.4.0-funcrel

Function Point, Quality and Sizing support

This extension provides the following support:

  • Function Points (transactions): a green tick indicates that OMG Function Point counting and Transaction Risk Index are supported
  • Quality and Sizing: a green tick indicates that CAST can measure size and that a minimum set of Quality Rules exist
Function Points
(transactions)		(error)
Quality and Sizing(tick)

AIP Core compatibility

This extension is compatible with:

AIP CoreSupported
8.3.x(tick)

Supported DBMS servers

This extension is compatible with the following DBMS servers:

DBMSSupported
CAST Storage Service/PostgreSQL(tick)

Prerequisites

(tick)An installation of any compatible release of CAST AIP (see table above)

Download and installation instructions

When using CAST Console and your application contains JEE/Java code, the extension will be automatically downloaded and installed for you:

Packaging, delivering and analyzing your source code

Once the extension is downloaded and installed, there is nothing specific to do: ensure your code is analyzed with the JEE Analyzer and the rules will be triggered.