HAM stands for Hybrid Analysis Mapping. The module originated in research done for DHS to
improve static-to-dynamic vulnerabilty matching. It is now a generalized system primarily for
parsing source code into Endpoint objects and performing lookups based on partial information.
This code is most easily accessed by creating an EndpointDatabase with
EndpointDatabaseFactory.getDatabase. The database can be searched using queries created with
...
Compile Dependencies (3)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
MPL 2.0
| | com.github.secdec.astam-correlator
»
threadfix-entities This module contains domain classes used by all of the other modules. | 1.2.13 | 1.3.8 |
I/O
Apache 2.0
|  | commons-io
»
commons-io2 vulnerabilities The Apache Commons IO library contains utility classes, stream implementations, file filters, | 2.4 | 2.22.0 |
HTML Parser
MIT
|  | org.jsoup
»
jsoup2 vulnerabilities jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL ... | 1.8.3 | 1.23.1 |
Test Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Testing
EPL 2.0
|  | junit
»
junit1 vulnerability JUnit Jupiter is the API for writing tests using JUnit 5. | 4.11 | 6.1.3 |
Maven Plugins
EPL 2.0
|  | org.jacoco
»
jacoco-maven-plugin The JaCoCo Maven Plugin provides the JaCoCo runtime agent to your tests and allows basic report creation. | 0.7.0.201403182114 | 0.8.15 |
Code Coverage
EPL 2.0
| | org.jacoco
»
org.jacoco.agent JaCoCo Agent | 0.7.0.201403182114 | 0.8.15 |
Maven Plugins
Apache 2.0
|  | org.owasp
»
dependency-check-maven1 vulnerability dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities ... | 1.3.6 | 13.0.0 |
Message Queue Client
Apache 2.0
|  | org.springframework
»
spring-jms JMS support package, including helper classes to send/receive JMS messages | 4.3.5.RELEASE | 7.0.8 |