Static Code Analysis of MATLAB code

Tim Pierce

2021 11 18

0 个回答

12 次查看（30 天）

1 个投票

I work in a government (U.S. Navy) office that is receiving some prototype software products from other agencies, portions of which are written in MATLAB. In order to get the products authorized to deploy on Navy networks, one step we have to take is static source code analysis to check for cybersecurity issues and to verify compliance with Department of Defense (DoD) Security Technical Implementation Guides (STIG). For the portions of the code written in other languages, we use automated static code analysis scanning tools like Checkmarx, Coverity, Fortify, etc. However, none of these tools support scanning of MATLAB code. Are there tools that do support MATLAB that you know of? If not, do you know how other government offices have proceeded in analyzing and authorizing products developed in MATLAB? Note I put R2021a in the "release" field, but there are various different release involved here.