用 Jev 与 CodeGraph 组合做安全审查
开发者分享了 typesafe-security-review 项目:把 Jev 的概率判断与代码图、OWASP/CWE 信息结合,用于低成本安全扫描。
在200封邮件中,关键词过滤器仅捕获9封真实钓鱼邮件,而Jev捕获181封,每封耗时262毫秒。Jev也误报了9封正常邮件(过滤器误报1封),其中多数是看起来很像诈骗的真实退款。作者表示将检查这9封退款,以阻止另外172封钓鱼邮件。
9 out of 200. That's how many real phishing emails a keyword filter caught. Jev caught 181, at 262 ms each. It did flag 9 normal emails too (the filter flagged 1). Most were real refunds, which honestly look a lot like scams. I'll check 9 refunds to stop 172 more phish.