Security Scanning LabVIEW source code

[nathankunst]

Our software products are subject to a Cybersecurity Authorization to Operate and we would like to adhere to secure coding practices in our SDLC. 

Does anyone have a recommendation for a tool that can perform security scans (e.g. static code analysis, dynamic "runtime" analysis) for LabVIEW source code? 

[nicolas.pj]

Hi nathankunst,

This is the only I can think of that may have some functionality you're interested in!

http://sine.ni.com/nips/cds/view/p/lang/en/nid/209042 

Cheers,
Nick

[yettsy_kj]

Is there any update available from NI support regarding this inquiry? 

          ‎05-24-2019 02:57 PM "Does anyone have a recommendation for a tool that can perform security scans (e.g. static code analysis, dynamic "runtime" analysis) for LabVIEW source code?" 

By the way the URL provided returns a blank NI page.

[Kyle97330]

The URL in question used to point towards the VI analyzer toolkit.  

https://web.archive.org/web/20190323152535/http://sine.ni.com/nips/cds/view/p/lang/en/nid/209042

The current equivalent link is probably this:

https://www.ni.com/en/support/downloads/software-products/download.labview-vi-analyzer-toolkit.html

This probably isn't exactly what you are looking for as it's a framework for scanning VIs and returning results, but pretty much all the scans it does are related to performance, debugging, and code cleanup/style enforcement.  Not much towards security.

It is possible to write your own tests that run under the framework, and there is a portion of this forum dedicated to that:

https://forums.ni.com/t5/VI-Analyzer-Enthusiasts/ct-p/7021

[yettsy_kj]

thanks Kyle97330 for your help!