Home
Developing
Learn how to develop by using the product.
Triage and analysis
Grouping similar findings allows security analysts or IT auditors to segment and triage source code problems. This section explains how to triage AppScan® Source assessments and analyze results.
Triage with filters
AppScan® Source for Analysis reports on all potential security vulnerabilities and may produce many thousands of findings for a medium to large code base. When you scan, you may find that the findings list contains items that are not important to you. To remove certain findings from the Findings view, you can choose a predefined filter or you can create your own filter. A filter specifies the criteria that determine which findings to remove from view.
Applying filters
Filters can be applied before or after scanning. To apply filters after scanning, use the Filter Editor or another view that allows you to apply filters. To apply filters before scanning, set a global filter or filter using a scan configuration. When you apply filters before scanning, you cannot show unfiltered findings or remove the filter without scanning again.
Applying filters globally
Filters that have already been created can be applied to all applications, individual applications, and to individual projects. Global filters are applied in the Properties view - where you can specify how you want the filters applied (a filter can be applied directly - or its inverse can be applied). For example, if you want to set a global filter for an application, select it in the Explorer view and then open its Properties view (using the View menu or by right-clicking the application and clicking Properties).

Applying filters globally

Filters that have already been created can be applied to all applications, individual applications, and to individual projects. Global filters are applied in the Properties view - where you can specify how you want the filters applied (a filter can be applied directly - or its inverse can be applied). For example, if you want to set a global filter for an application, select it in the Explorer view and then open its Properties view (using the View menu or by right-clicking the application and clicking Properties).

Before you begin

If you are setting a filter for all applications or an individual project, use the Filters tab in the Properties view. If you are setting a filter for an individual application, use the Exclusions and Filters tab in the Properties view.

Procedure

In the Filters section of the tab, click Add.
In the Select Filter dialog box, choose the filter that you want to apply globally.
Optional: If you want the inverse of the filter to be applied (rather than applying the filter directly), select Invert filter.
Click OK to close the Select Filter dialog box.
When you have completed adding filters, save the changes in the Properties view.