Home
Developing
Learn how to develop by using the product.
AppScan® Source trace
With AppScan® Source trace, you can verify input validation and encoding that meets your software security policies. You can look at the findings that produce input/output traces and mark methods as validation and encoding routines, sources or sinks, callbacks, or taint propagators.
AppScan® Source trace scan results
Scan results may include traces identified by AppScan® Source trace. The icon in the Trace column indicates the existence of a trace of the call graph.
Searching AppScan® Source traces
If you want to group trace findings, you can search for sources or sinks. This causes the trace findings to appear in the Search Results view.

Searching AppScan Source traces

If you want to group trace findings, you can search for sources or sinks. This causes the trace findings to appear in the Search Results view.

In the Trace view, click Search for traces with the same type routine. Then, in the Search Findings dialog box, select source, sink, lost sink (includes virtual lost sinks), virtual lost sink, or trace calls to isolate the results to the traces that contain the string. The search results, which are cumulative, appear in the Search Results view. From this view you can search again to refine the search.