Home/ Questions/Q 7496441
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-29T18:36:53+00:00

I am trying to learn on Web Application security. I worked with tools that

  • 0

I am trying to learn on Web Application security. I worked with tools that do static Analysis like RIPS, Pixy. Also did profiling of web-applications using xdebug and kcachegrind.
Now I am trying to research more on Dynamic Analysis. I would like to identify work flow deviations from call graphs generated during profiling.
Is it possible to do such an analysis??
If so can you suggest me any references or tools that achieve this?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There are some projects/papers addressing this need:

    1. PHP Vulnerability Hunter
    2. PHP Analyzer
    3. Static and Dynamic Analysis for PHP
      Security       (pdf)

    The third item is an academic presentation from 2006, so it may be a little out of date while the first resource seems the most mature DA testing tool I’ve seen. You might also look into the Monte Carlo Method as a way of throwing arbitrary input at a system to test its robustness, particular if you deal with numerical or statistical data.

    • 0