BinScope is a Microsoft verification tool that analyzes binaries on a project-wide level to ensure that they have been built in compliance with Microsoft’s Security Development Lifecycle (SDL) requirements and recommendations. BinScope checks that SDL-required compiler/linker flags are being set, strong-named assemblies are in use, up-to-date build tools are in place, and the latest good ATL headers are being used. BinScope also reports on dangerous constructs that are prohibited by SDL.
To set up BinScope:
- Ensure that the host system is running the latest version of Windows OS supported by your application.
- Ensure that .NET Framework 2.0 or later is installed on your computer.
- If you want to install BinScope in Visual Studio, ensure that you have VS 2008 or later installed on your computer.
- Download BinScopeSetup.msi.
- Run BinScopeSetup.msi.
- By default, both the standalone and Visual Studio-integrated versions of BinScope will be installed. If you do not have Visual Studio 2008, or if you want to install the standalone version only, uncheck Integrate into Visual Studio 2008 (if installed).
- Click Next and follow menu instructions to complete the installation.
- Windows 7, Windows Vista, Windows XP
- Host system must be running the latest version of the Windows OS supported by your application
- .NET Framework 2.0 or later
- Windows Server 2003 SP2 – with manual modifications detailed in Instructions
- Windows Server 2008 (or higher)
- For Visual Studio integration features: Visual Studio 2008 or later
- For Team Foundation Server integration features: Microsoft Team Foundation Server 2008 or later
- For Visual Studio Team System integration features: Microsoft Visual Studio Team System 2008 or later