Skip to content

Commit 6362e51

Browse files
authored
Update README.md
1 parent 4a6863b commit 6362e51

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

README.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,7 @@
11
# What is secucheck-core?
2-
Secucheck-core is the taint analysis. Currently, it includes two solver,
3-
Boomerang 3.x and Flowdroid.
2+
This is the core taint analysis of the SecuCheck tool which can be found in [this repository](https://github.com/secure-software-engineering/secucheck/) which also contains further documentation. SecuCheck integrates two data-solvers: Boomerang 3.x, an implementation of SPDS and FlowDroid, an implementation of IFDS.
43

5-
Boomerang 3.x is the default solver. Boomerang 3.x tested for WebGoat, catalog, demo-project and spring-petclinic and it finds all the TaintFlows. Flowdroid finds 0 taintflows due to its limitations.
4+
Boomerang 3.x is the default solver. Our tests are based on Boomerang 3.x. For WebGoat, the catalog, the demo-project and spring-petclinic and it finds all the TaintFlows.
65

76
## How to build secucheck-core manually?
87
- secucheck-core uses Boomerang DemandDriven analysis feature which is not yet realeased. Therefore, we need to build the Boomerang manually to the local maven before building SecuCheck.

0 commit comments

Comments
 (0)