HCL TECHNOLOGIES ABOUT US PRODUCTS & SOLUTIONS RESOURCES CONTACT US

Home
Security AppScan Source - Windows and Linux
HCL® AppScan® Source delivers maximum value to every user in your organization who plays a role in software security. Whether a security analyst, quality assurance professional, developer, or executive, the AppScan Source products deliver the functionality, flexibility, and power you need - right to your desktop.
Extending product function
Learn how to extend the product.
Customizing the vulnerability database and pattern rules
This section describes how to customize the database and integrate customized vulnerabilities and other routines into scans.
Customizing with pattern-based rules
AppScan® Source pattern-based scanning is an analysis of your source code based on customized search criteria. Pattern-based scanning is similar to grep (grep searches one or more files for a given character string or pattern). Auditors or security analysts performing triage might use pattern-based scanning to search for specific patterns in specific applications or in a project. Once you define a pattern as a vulnerability type, a scan of your source code identifies the pattern as a vulnerability. When AppScan Source finds a match, the item appears in the findings table. The out-of-the-box AppScan Source rule library includes predefined rules and rule sets (collections of rules).
Pattern rule sets
A pattern rule set is a collection of pattern rules. You can add new pattern rule sets or you can modify or remove existing ones. AppScan® Source provides a series of language-specific pattern rule sets that you can choose to apply to your projects or applications (for example, you may want to apply the Java pattern rule set to your Java/JSP projects).
Modifying and removing rule sets
Out-of-the-box pattern rules sets, and rule sets that you have created, can be modified and removed in the Pattern Rule Library view.

Modifying and removing rule sets

Out-of-the-box pattern rules sets, and rule sets that you have created, can be modified and removed in the Pattern Rule Library view.

Note: You must have Manage Patterns permission to be able to create pattern rules or rule sets - or to modify and remove custom rules and rule sets.

Modifying a rule set

These modifications can be made to a rule set:

You can add a rule to an existing rule set by following the instructions for populating a new rule set in Creating a rule set in the Pattern Rule Library view.
To remove a rule or multiple rules from a rule set, select the rule or rules to remove and then perform one of these actions:
- Click Remove Rules From Set.
- Right-click and select Remove Rules From Set.
You can add a rule set to another rule set in one of two ways:
- Select a rule set and drag and drop it into another rule set.
- Right-click a rule set and select Add Rule Set as Child and then, in the Choose Rule Set dialog box, select the rule set that you want to add as a parent rule set.
You can modify the Display Name and Project types of a rule set: Right-click the rule set and select Properties to open the Rule Set Properties dialog box. In this dialog box, you can edit the Display Name field - or you can click the Project types field Edit button to select one or more project types.

Removing a rule set

To remove a rule set, select it and perform one of these actions:

Click Remove Rule Set.
Right-click and select Remove.