Ensuring information security in software systems through preliminary static code analysis

Abstract

This work is about developing a static code analyzer for the Crystal programming language to identify and prevent potential vulnerabilities. Crystal is a young and promising programming language that offers modern tools for creating reliable software. In this work, we look at how static analysis can help identify and fix weaknesses in code that could lead to information leaks, encryption vulnerabilities, and other potential security issues.