{"id":505,"date":"2014-07-02T14:06:02","date_gmt":"2014-07-02T23:06:02","guid":{"rendered":"\/blog\/?p=505"},"modified":"2023-09-21T09:38:41","modified_gmt":"2023-09-21T00:38:41","slug":"fortify%eb%b3%91%eb%a0%ac%eb%b6%84%ec%84%9d-%eb%b0%a9%eb%b2%95","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=505","title":{"rendered":"[Fortify]\ubcd1\ub82c\ubd84\uc11d \ubc29\ubc95"},"content":{"rendered":"\n

\ud615\uc2dd)<\/span><\/p>\r\n

sourceanalyzer -64 -Xmx8G -Dcom.fortify.sca.RmiWorkerMaxHeap=4G -XX:-UseGCOverheadLimit -XX:MaxPermSize=256M -j 3 -logfile [\ub85c\uadf8\ud30c\uc77c]  -scan -f [FPR\ud30c\uc77c]<\/span><\/p>\r\n


<\/p>\r\n


<\/p>\r\n

1) CLI \uc608\uc81c \ubc0f \uc124\uba85<\/span><\/p>\r\n


<\/p>\r\n

 sourceanalyzer -b build_id -64 -Xmx6144M -Dcom.fortify.sca.RmiWorkerMaxHeap=3072M -XX:-UseGCOverheadLimit -XX:MaxPermSize=256M -j 6 -logfile scan.log -scan -f build_id.fpr<\/span><\/span><\/p>\r\n

 \uc704 CLI \uc608\uc81c\uc5d0 \ub178\ub780\uc0c9\uc73c\ub85c \ud45c\uc2dc\ub41c \uc601\uc5ed\uc774 Parallel mode \uc635\uc158\uc785\ub2c8\ub2e4. -j scan \uc2dc \uc0ac\uc6a9\ud560 CPU \ucf54\uc5b4\uc774\uba70, -Dcom.fortify.sca.RmiWorkerMaxHeap\ub294 \uac01 CPU \ucf54\uc5b4\uac00 \uc0ac\uc6a9\ud560 \ud799 \uba54\ubaa8\ub9ac\uc785\ub2c8\ub2e4.<\/span><\/p>\r\n


<\/p>\r\n


<\/p>\r\n

2) Parallel mode \uc635\uc158 \uc0b0\uc815 \ubc29\ubc95<\/span><\/p>\r\n


<\/p>\r\n

 \uba3c\uc800 scan\uc744 \uc9c4\ud589\ud560 \uc2dc\uc2a4\ud15c\uc758 CPU, Memory\ub97c \ud655\uc778\ud55c \ud6c4, \uc544\ub798 \uae30\uc900\uc73c\ub85c \uc0b0\uc815\ud569\ub2c8\ub2e4.<\/span><\/p>\r\n

 >CPU \ucd5c\ub300 \ucf54\uc5b4\uc5d0\uc11c -2<\/span><\/p>\r\n

 >\ub9cc\uc57d CPU \ucf54\uc5b4\uac00 6\uc77c \uacbd\uc6b0 \uac00\uc6a9 \uba54\ubaa8\ub9ac\uc758 70%\ub97c 8\ub85c \ub098\ub204\uace0, -Xmx\uc5d0 (\uac00\uc6a9\uba54\ubaa8\ub9ac70% \/ 8) * 2\ub97c<\/span><\/p>\r\n

  -Dcom.fortify.sca.RmiWorkerMaxHeap\ub294 (\uac00\uc6a9\uba54\ubaa8\ub9ac70% \/ 8) * 1\ub97c \uc0b0\uc815\ud569\ub2c8\ub2e4.<\/span><\/p>\r\n

 >\ub530\ub77c\uc11c CPU 8core, Memory 32GB \uc77c \uacbd\uc6b0, -j 6, -Xmx5600M, -Dcom.fortify.sca.RmiWorkerMaxHeap=2800M \uc73c\ub85c \uc124\uc815<\/span><\/p>\r\n


<\/p>\r\n


<\/p>\r\n

3)Parallel mode \uc801\uc6a9 \uc0ac\ub840<\/span><\/p>\r\n

 \uc544\ub798 \ud658\uacbd\uc5d0\uc11c scan \uc2dc 3.9 normal mode, 4.0 Parallel mode \ubd84\uc11d \uc2dc\uac04 \ube44\uad50 \uc790\ub8cc\uc785\ub2c8\ub2e4.<\/span><\/p>\r\n

 CPU : 8Core Xeon ES-2609 2.40GHz, Memory : 16GB*2,  SSD : 256GB<\/span><\/p>\r\n

 JAVA, JSP : 5,000\uc5ec\uac1c<\/span><\/p>\r\n


<\/p>\r\n


<\/p>\r\n

\u25a0 \uc131\ub2a5 \ubc0f \ud6a8\uacfc<\/span><\/p>\r\n

XX\ud654\uc7ac BMT \ub2f9\uc2dc, CPU 8Core, Memory 16GB, JAVA\/JSP 8,000\uc5ec\uac1c \ud658\uacbd\uc5d0\uc11c scan \uc2dc\uac04\uc774 2\uc2dc\uac04 30\ubd84 \uc18c\uc694\ub428.<\/span><\/p>\r\n

\uc0c1\uc138 \ubc29\ubc95\uc740 SCA \ub9e4\ub274\uc5bc\uc744 \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4.<\/span><\/p>\r\n


<\/span><\/p>\r\n

SCA \ubc84\uc804        scan \ubc29\ubc95       scan \uc18c\uc694 \uc2dc\uac04<\/span><\/font><\/p>\r\n

3.9             normal mode     8:19:43<\/span><\/font><\/p>\r\n

<\/p>\r\n

4.0             Parallel mode   5:23:12<\/span><\/font><\/p>\r\n

<\/p>\r\n

<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\ud615\uc2dd) sourceanalyzer -64 -Xmx8G -Dcom.fortify.sca.RmiWorkerMaxHeap=4G -XX:-UseGCOverheadLimit -XX:MaxPermSize=256M -j 3 -logfile [\ub85c\uadf8\ud30c\uc77c]  -scan -f [FPR\ud30c\uc77c] 1) CLI \uc608\uc81c \ubc0f \uc124\uba85  sourceanalyzer -b build_id -64 -Xmx6144M -Dcom.fortify.sca.RmiWorkerMaxHeap=3072M -XX:-UseGCOverheadLimit -XX:MaxPermSize=256M -j 6 -logfile scan.log -scan -f build_id.fpr  \uc704 CLI \uc608\uc81c\uc5d0 \ub178\ub780\uc0c9\uc73c\ub85c \ud45c\uc2dc\ub41c \uc601\uc5ed\uc774 Parallel mode \uc635\uc158\uc785\ub2c8\ub2e4. -j scan \uc2dc \uc0ac\uc6a9\ud560 CPU \ucf54\uc5b4\uc774\uba70, -Dcom.fortify.sca.RmiWorkerMaxHeap\ub294 \uac01 CPU \ucf54\uc5b4\uac00 \uc0ac\uc6a9\ud560 \ud799 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66],"tags":[],"class_list":["post-505","post","type-post","status-publish","format-standard","hentry","category-computing_fortify"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=505"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/505\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}