Consider reading the following links for more information: US CERT WhiteBox Testing: https://www.us-cert.gov/bsi/articles/best-practices/white-box-testing/white-box-testing. Security Code Scan – static code analyzer for .NET: https://security-code-scan.github.io/ SEI CERT Coding Standards: https://wiki.sei.cmu.edu/confluence/display/seccode/SEI+CERT+Coding+Standards. Find Security Bugs: http://find-sec-bugs.github.io/. DevBug is an on-line PHP secure code analysis (SCA): http://www.devbug.co.uk/. MITRE Secure Code Review: https://www.mitre.org/publications/systems-engineering-guide/enterprise-engineering/systems-engineering-for-mission-assurance/secure-code-review. MITRE Cyber Threat Susceptibility Assessment: https://www.mitre.org/publications/systems-engineering-guide/enterprise-engineering/systems-engineering-for-mission-assurance/cyber-threat-susceptibility-assessment ...