RIPS
RIPS (Research and Innovation to Promote Security) is a static code analysis software for the automated detection of security vulnerabilities in PHP and Java applications. The initial tool was written by Johannes Dahse and released during the Month of PHP Security in May 2010 as open-source software. The open-source version is released under the Lesser GNU General Public License and was maintained until 2013. In 2016, RIPS Technologies, a company based in Bochum, Germany, released a rewritten version of RIPS. The new RIPS product overcomes the limitations of the open-source tool and is more focused on industrial customers. Its analysis techniques were awarded, amongst others, the Internet Defense Prize by Facebook. In 2020, RIPS Technologies was acquired by SonarSource. The RIPS tool is no longer available as a stand-alone product. Open-Source Version (PHP) The open-source version tokenizes PHP code (lexical analysis) based on PHP's tokenizer extension and performs semantic analysis to build a programme model. Based on previously analysed variable assignments, it performs backwards-directed inter-procedural taint analysis of sensitive sinks. Its strength is the ability to scan PHP applications very fast for PHP-specific vulnerabilities. It supports the detection of 15 different vulnerability types, including Cross-Site Scripting, SQL Injection, Local File