Resources

Klocwork product documentation is available here.

White Paper

White Paper

The value of peer code review is undeniable. But despite this, it continues to be a much-maligned milestone in the software development cycle. Code reviews are difficult to implement consistently, the review is often left incomplete, and let’s be honest, developers generally don’t like doing them. In this latest white paper, Klocwork provides specific recommendations on how organizations can implement a simple, effective code review process that takes advantage of the latest tools and technologies.

TAGS: CODE REVIEW, SOFTWARE QUALITY, SOFTWARE SECURITY, SOURCE CODE ANALYSIS

Video

Video

See how Klocwork Insight integrates in your SDLC both at the developer desktop & build integration stage to drive better code quality and reliability

TAGS: INSIGHT, SOFTWARE ARCHITECTURE, SOURCE CODE ANALYSIS, STATIC ANALYSIS, INSIGHT 9.5

Video

Video

Video Demonstration: See how developers can use Klocwork's plug-in for Visual Studio to find and fix defects before they check-in their source code.

TAGS: ENDIAN, INSIGHT, SOFTWARE QUALITY, STATIC ANALYSIS, VISUAL STUDIO, INSIGHT 9.5

Video

Video

Video Demonstration: See how Klocwork Checker Studio is used to create custom static analysis checkers to find defects and security vulnerabilities.

TAGS: INSIGHT, SOFTWARE QUALITY, SOFTWARE SECURITY, STATIC ANALYSIS, INSIGHT 9.5

White Paper

White Paper

Automated source code analysis locates and describes areas of weakness in source code. Those weaknesses might be security vulnerabilities, logic errors, implementation defects, concurrency violations, rare boundary conditions, or many other types of problem-causing code. The name of the associated research field is static analysis and while the technology has been around for decades - primarily in the form of lint tools - modern static analysis has little in common with its well known but much maligned ... More

TAGS: DEFECT DETECTION, SOFTWARE QUALITY, SOFTWARE SECURITY, STATIC ANALYSIS, TRUEPATH

Video

Video

Video Demonstration: Visualizing Source Code Architecture with Klocwork Architect

TAGS: INSIGHT, SOFTWARE ARCHITECTURE, SOFTWARE REUSE, INSIGHT 9.5

White Paper

White Paper

With the adoption of Agile, the need to create high-quality software code in less time has never been greater. In this paper, developers will learn how to maintain velocity and eliminate bug debt with automated tools.

TAGS: AGILE DEVELOPMENT, CODE REVIEW, CONTINUOUS ANALYSIS, REFACTORING, STATIC ANALYSIS

Article

Article

With new aircraft now being highly software dependent – software verification and integrity is becoming ever more vital. Tim Robinson speaks to one company who are experts in squashing these software bugs in mission-critical code.

TAGS: AVIONICS, DO-178B, EMBEDDED PROGRAMMING, SOFTWARE VERIFICATION, STATIC ANALYSIS

Case Study

Case Study

As a manufacturer of medical electronics, meeting the FDA's rigorous safety and quality standards is crucial to Stockert. With the safety of their devices depending significantly on the quality of software they develop, Stockert invested in Klocwork's source code analysis tools. Learn how their static analysis deployment has helped Stockert achieve FDA certifications, gain more trust in their code quality, and increase development efficiency.

TAGS: CODING STANDARDS, DEFECT DETECTION, DEVELOPER PRODUCTIVITY, MEDICAL DEVICES, SOFTWARE QUALITY, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Case Study

Case Study

As the market-leading manufacturer of DSL devices in Germany, the software development cycle of AVM is focused on meeting the demand for a high-quality, reliable and secure online experience. Faced with the challenge of writing software that can be adapted to support the various functions of their product line, AVM needed an advanced static analysis tool capable of thorough and diverse code testing. Learn how AVM deployed Klocwork to improve code quality and cut development time.

TAGS: CODE COMPLEXITY, DEVELOPER PRODUCTIVITY, NETWORK AND TELECOM EQUIPMENT, SOFTWARE METRICS

On-Demand Webinar

On-Demand Webinar

When it comes to security, embedded software presents a unique set of challenges for application development and engineering teams. To ensure your embedded software is secure, you must start by understanding the threats that can make it susceptible to attack and then establish appropriate counter measures. Designed for embedded software engineers and security specialists, this on-demand webinar identifies the characteristics of embedded software that make it vulnerable to security threats, discusses the importance ... More

TAGS: CODE REVIEW, EMBEDDED PROGRAMMING, SOFTWARE SECURITY, SOURCE CODE ANALYSIS

Case Study

Case Study

Iskratel employs over 400 developers writing complex software to drive advanced communications technologies. These applications typically include between 1 and 1.5 million lines of code, written in C, SDL, Java and C++. To identify the best testing solution to eliminate bugs early in the development lifecycle, Iskratel conducted a head-to-head competitive evaluation of three products, and ultimately selected Klocwork's source code analysis tools. This case study looks at how Iskratel uses automated source code ... More

TAGS: DEFECT DETECTION, DEVELOPER PRODUCTIVITY, NETWORK AND TELECOM EQUIPMENT, STATIC ANALYSIS

White Paper

White Paper

In the push to meet demands for functionality and speed, software teams are moving away from single processor architectures at a rapid rate. But the realities of developing software for these next-generation architectures is introducing significant complexity when it comes to identifying errors in the software - specifically concurrency errors and endian incompatibilities. This paper looks at the challenges of developing for multicore and multiprocessor environments, explains how Klocwork's tools can be used to ... More

TAGS: CONCURRENCY ANALYSIS, DEADLOCK, ENDIAN, LIVELOCK, MULTICORE, SOURCE CODE ANALYSIS

Case Study

Case Study

Tasked with building the embedded software component for a next-generation human prosthetic, the Johns Hopkins University Applied Physics Laboratory software team turned to Klocwork's source code analysis tools to help ensure the software's reliability and boost developer productivity.

TAGS: DEFECT DETECTION, DEVELOPER PRODUCTIVITY, EMBEDDED PROGRAMMING, LANGUAGE: C, MEDICAL DEVICES, SOURCE CODE ANALYSIS

Case Study

Case Study

The driving objective of the Laboratory for Atmospheric and Space Physics (LASP) at the University of Colorado is research in atmospheric science, space physics, solar influences, and planetary science, supported by the technological contributions of its engineering and mission operations divisions. To better ensure the reliability of key data processing software, LASP has introduced Klocwork Insight into several projects.

TAGS: AVIONICS, BUG IDENTIFICATION, DEFECT DETECTION, LANGUAGE: C

On-Demand Webinar

On-Demand Webinar

Join our guest speaker Dave West, Senior Analyst, Forrester Research, Inc., as he reviews the findings of a recent code review study and discusses why it’s time for software development organizations to exploit modern technology to improve the code review process. Learn about the key challenges of code review and recommendations on ways to improve the process right from the analyst himself.

TAGS: CODE REVIEW, DEFECT DETECTION, SOFTWARE QUALITY, SOFTWARE SECURITY, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

We're setting a new standard for static analysis tools with the launch of Klocwork Insight 9.5. The latest release of our flagship product brings on-the-fly static analysis capabilities to the desktop, allowing developers to fix critical defects the moment they're introduced. Features covered in this webinar: On-the-fly static analysis that instantly underlines defects as code is written Drag and drop reporting that answers complex questions about the security and reliability of your code On-the-fly impact ... More

TAGS: DEFECT DETECTION, INSIGHT 9.5, SOFTWARE QUALITY, SOFTWARE SECURITY, SOURCE CODE ANALYSIS

Video

Video

Video Demonstration: See how developers can use Klocwork's plug-in for Eclipse to help them find and fix defects before they check-in their code.

TAGS: ECLIPSE, INSIGHT, LANGUAGE: C, SOFTWARE QUALITY, STATIC ANALYSIS, INSIGHT 9.5

White Paper

White Paper

To keep pace with ever-increasing customer demands on software functionality and time-to-market expectations, software developers have had to evolve the way they develop code to be both faster and higher quality. As part of this trend, Agile development practices are becoming more commonplace. However, to fully realize the benefits of Agile development, it is critical to have a repeatable process for ensuring code is as free of defects and security vulnerabilities as possible. This paper examines how the use of ... More

TAGS: AGILE DEVELOPMENT, DEFECT DETECTION, SOFTWARE SECURITY, SOURCE CODE ANALYSIS

Video

Video

Video Demonstration: See how to use Klocwork Insight to analyze and optimize your header include directives in C/C++.

TAGS: INSIGHT, INSIGHT 9.5, LANGUAGE: C, REFACTORING

Video

Video

Video demonstration: using Klocwork Review for integration build reporting and metrics on your source code

TAGS: INSIGHT, SOFTWARE METRICS, SOFTWARE QUALITY, SOFTWARE SECURITY, INSIGHT 9.5

White Paper

White Paper

Producing high-quality, feature-rich software while meeting regulatory guidelines presents a unique set of challenges for those developing medical device software. In this paper for medical device software managers, learn how an effective verification process can help achieve FDA compliance and meet productivity goals.

TAGS: DEVELOPER PRODUCTIVITY, MEDICAL DEVICES, SOFTWARE VERIFICATION, STATIC ANALYSIS

Video

Video

Video Demonstration: Rename and Introduce Variable Refactoring for C/C++ in Eclipse and Visual Studio with Klocwork Refactoring

TAGS: ECLIPSE, INSIGHT, LANGUAGE: C, REFACTORING, VISUAL STUDIO, INSIGHT 9.5

Case Study

Case Study

BMC Software, a leading global provider of enterprise management solutions, turned to Klocwork to help them address quality and security concerns within their Action Request product line. With robust Quality Assurance practices already in place, BMC was looking for a solution that would enable its developers to find issues in their product early in the development process. BMC performed a rigorous evaluation of the two leading vendors in this space which ultimately lead to the selection of Klocwork.

TAGS: CODE COMPLEXITY, SOFTWARE ARCHITECTURE, SOFTWARE QUALITY, STATIC ANALYSIS

Article

Article

Embedded software is a ubiquitous presence onboard aircraft today. Just as software has become a key element in everything from consumer vehicles to household appliances, it is also critical to aircraft control. Beyond mission-critical avionics systems, software is also increasingly present in commercial aircraft galley equipment, passenger onboard entertainment systems and, more recently, wi-fi networks for passengers.

TAGS: AVIONICS, DO-178B, EMBEDDED PROGRAMMING, STATIC ANALYSIS

Video

Video

A video showing how Klocwork can help migrate your code to Intel architecture, addressing issues like complex code bases and hardcoded endian memory.

TAGS: EMBEDDED PROGRAMMING, INTEL, SOFTWARE ARCHITECTURE, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Case Study

Case Study

As a market-leading provider of healthcare technology, Schiller has deployed Klocwork tools, including the Connected Desktop, to help the company meet its MISRA standards, speed up testing, and achieve higher quality.

TAGS: CODING STANDARDS, EMBEDDED PROGRAMMING, LANGUAGE: C, MEDICAL DEVICES, MISRA, SOFTWARE QUALITY, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

Developing software for mission-critical applications such as military, aerospace, and medical devices requires aggressive strategies for reducing risk throughout the development lifecycle. This brief session looks at three crucial components of an effective risk management strategy that can be achieved with source code analysis, including stabilizing code early in development, automating metrics and measurement and creating a disciplined approach to producing maintainable code.

TAGS: EMBEDDED PROGRAMMING, SOFTWARE SECURITY, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Case Study

Case Study

Feeling that powerful analysis techniques are often overshadowed by testing and review when it comes to creating high quality software, representatives at Lawrence Livermore National Labs wrote this article which makes a compelling business case for the use of static analysis tools. The article contains results from two case studies where automated source code analysis tools were run on C++ code.

TAGS: BUG IDENTIFICATION, DEFECT DETECTION, SOFTWARE QUALITY, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Case Study

Case Study

As a provider of payment software for banks and merchants worldwide, ACI Worldwide puts a great deal of emphasis on code quality and security. Given the nature of their business and need for PCI compliance, ensuring their source code is intruder resistant and free from defects is paramount. Gain insight from their first-hand experience qualifying, selecting and deploying a source code analysis solution and learn why they selected Klocwork.

TAGS: CODING STANDARDS, SOFTWARE QUALITY, SOFTWARE SECURITY, STATIC ANALYSIS

Video

Video

Creating Code Modules and Using View Filters in Klocwork Review

TAGS: CODE REVIEW, INSIGHT 9.5, SOFTWARE METRICS, SOFTWARE QUALITY

White Paper

White Paper

This Tips and Tricks guide breaks down the topic of software security assurance into a series of questions that fall into these four key areas: Managing for Software Security, Developing for Software Security, Auditing for Software Security, and Testing for Software Security.

TAGS: SOFTWARE QUALITY, SOFTWARE SECURITY

Video

Video

Video Demonstration: See how to use Klocwork to refactor code in C/C++ code, specifically looking at the Extract Function and Inline Function refactor

TAGS: INSIGHT, LANGUAGE: C, REFACTORING, VISUAL STUDIO, INSIGHT 9.5

White Paper

White Paper

Given the complexity of today's airborne software systems, the use of automated tools can assist in the successful on-time and on-budget delivery of these projects. Automated source code analysis tools locate and describe areas of weakness in source code, and can help address key areas of the DO-178B guidance related to the Software Verification and Software Lifecycle Data requirements. In this white paper, learn how the defect, architecture, and metrics analysis capabilities of Klocwork Insight can be used to ... More

TAGS: AVIONICS, DEFECT DETECTION, DO-178B, INSIGHT, SOFTWARE ARCHITECTURE, SOFTWARE METRICS

Video

Video

Video Demonstration: See how command line users can use Klocwork Desktop to find and fix defects before they check-in their code.

TAGS: COMMAND LINE, SOFTWARE QUALITY, STATIC ANALYSIS, INSIGHT 9.5

Video

Video

Video Demonstration: Klocwork Inspect, the Code Review tool with a social media workflow.

TAGS: CODE REVIEW, SOFTWARE VERIFICATION

Article

Article

With the types of security attacks, what they're targeting, and where they're coming from continuing to grow, the problem of software security can seem overwhelming. But with an alarming number of security vulnerabilities starting within the software code itself, writing clean code becomes an important weapon in your defense against security attacks. This article from SD Times solicits input from industry experts on the reality of software security, the common security mistakes being made, and how to avoid ... More

TAGS: SOFTWARE SECURITY, STATIC ANALYSIS

Case Study

Case Study

In Motorola's continuous process improvement paradigm, the iDEN Mobile Devices software team implemented several processes and tools in 2005 - the combination of which has led to significant cost reductions and quality improvements. The Klocwork tool suite was a major contributor to achieving the quality and productivity results identified in this case study.

TAGS: DEVELOPER PRODUCTIVITY, LANGUAGE: C, LANGUAGE: JAVA, NETWORK AND TELECOM EQUIPMENT, SOFTWARE QUALITY

Case Study

Case Study

Sencore needed a static analysis tool to help catch software defects to ensure high-reliability video transmissions to its customers. Sencore used Klocwork Insight to analyze its software builds for memory leaks and critical issues that might compromise the quality of the video stream its solutions deliver.

TAGS: CONTINUOUS ANALYSIS, INSIGHT, LANGUAGE: C, SOFTWARE QUALITY, SOFTWARE SECURITY, SOFTWARE VERIFICATION, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Case Study

Case Study

Offering network solutions to integrate sensors and communications for government and defense customers, Raytheon Network Centric Systems had two challenges: frequent use of legacy code and the unavailability of the original developers meant new developers had to come up to speed quickly; and the need to run 'what if' scenarios.

TAGS: LARGE CODEBASE, SOFTWARE ARCHITECTURE, SOFTWARE REUSE

On-Demand Webinar

On-Demand Webinar

The complexity of porting or developing for multicore or multiprocessor architectures can lead to increased project expenses and timelines. In this ready-to-watch webinar, learn about Klocwork's tools-oriented approach to overcoming these challenges which equips developers with a personal mentor to detail critical concurrency and endian incompatibility issues as they're introduced.

TAGS: CONCURRENCY ANALYSIS, DEADLOCK, ENDIAN, MULTI-CORE DEVELOPMENT, MULTICORE, STATIC ANALYSIS

Case Study

Case Study

Panda Security conducted a rigorous evaluation to determine the best source code analysis tool to integrate into its software test and quality process. After trying a number of tools, Panda Security selected Klocwork, which is now an important time saving component of the company’s comprehensive software regression test suite.

TAGS: SOFTWARE SECURITY, SOURCE CODE ANALYSIS

On-Demand Webinar

On-Demand Webinar

Peer code reviews are a vital step in the software development cycle but everyone knows the challenges involved. Learn how a tools-based approach to peer code reviews can unleash the benefits of this important development milestone by incorporating social media concepts, enabling collaboration and communication amongst reviewers, and combining static analysis with code reviews.

TAGS: CODE REVIEW, SOFTWARE VERIFICATION, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Fact Sheet

Fact Sheet

Klocwork delivers tools that enable developers to identify critical security vulnerabilities, reliability defects and architectural issues quickly and accurately. Klocwork products integrate within the normal development environment, enabling risk assessment and fast critical-bug fixing in mission-critical C, C++, Java and C# software.

TAGS: DEVELOPER PRODUCTIVITY, INSIGHT, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Research

Research

Demanding more sophisticated feature sets, advanced user interfaces, and perpetual connectivity, the next-generation of embedded devices are driving the accelerated adoption of multicore and multiprocessor architectures. This exclusive report, using data from VDC Research's 2010 Embedded Engineering Survey, highlights the new realities of developing software for these advanced platforms. Get the report and learn how the growth in multicore and multiprocessor architectures is introducing a new set of challenges for ... More

TAGS: EMBEDDED PROGRAMMING, MULTI-CORE DEVELOPMENT, SOURCE CODE ANALYSIS, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

Looking for a way to understand and visualize your complex software code, identify re-usable components, and re-engineer your code for better optimization? Then don’t miss our latest on-demand webinar. Using graphical models of source code, Klocwork Insight allows software architects to experiment with various models without impacting the system. This webinar provides a technical deep-dive into the following advanced software architecture analysis capabilities: code discovery and comprehension, Impact ... More

TAGS: INSIGHT, SOFTWARE ARCHITECTURE, SOURCE CODE ANALYSIS

Fact Sheet

Fact Sheet

A pioneer in source code analysis, Klocwork offers a portfolio of software development productivity tools that ensure the security, reliability and maintainability of complex code bases.

TAGS: DEVELOPER PRODUCTIVITY, INSIGHT, SOURCE CODE ANALYSIS, STATIC ANALYSIS, TRUEPATH

Research

Research

Embedded software development teams are striving to meet growing market demands while juggling increased software complexity across globally distributed teams. Nowhere are these challenges more amplified than in the medical device sector, where resources are limited, yet code complexity is growing at one of the fastest rates in the industry.

TAGS: CODE COMPLEXITY, EMBEDDED PROGRAMMING, MEDICAL DEVICES, SOFTWARE REUSE, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

In this on-demand webinar hosted by Klocwork, learn where source code analysis can be used in your development process, the problems that it solves, and how the technology can be used to streamline a number of productivity bottlenecks in your development process.

TAGS: DEVELOPER PRODUCTIVITY, SOURCE CODE ANALYSIS, STATIC ANALYSIS

Research

Research

This exclusive study commissioned by Klocwork and conducted by Forrester Consulting provides valuable data and insights that will help you benchmark and improve your peer code review practices, including: top code review challenges; respondent's feedback on code review benefits, frequency, and technologies; and recommendations on modernizing code reviews.

TAGS: CODE REVIEW, DEFECT DETECTION, SOFTWARE SECURITY, STATIC ANALYSIS

Research

Research

Software coding defects increase the cost of development and support, tarnish a company's reputation, and limit revenue opportunities. This research report from the New Rowley Group discusses how investing in a defect detection and prevention solution enables companies to catch defects early, limit their financial impact, and institute a proactive approach to defect prevention.

TAGS: DEFECT DETECTION, SOFTWARE QUALITY

On-Demand Webinar

On-Demand Webinar

During this web seminar you will see how easy it is to exploit security vulnerabilities caused by common software defects. Watch how a simple hack on an older version of FireFox enables a hacker to gain full access to a remote machine. More importantly, see how this same vulnerability could have been prevented through the use of static analysis.

TAGS: DEFECT DETECTION, INSIGHT, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

In an Agile context where software production is performed in short, feature-driven iterations, it's critical that bugs are found and removed from code as early as possible. In this session, we examine the evolution of source code analysis technology and discuss why and how it should be deployed for maximum benefit within an Agile development process.

TAGS: AGILE DEVELOPMENT, SOURCE CODE ANALYSIS, STATIC ANALYSIS

On-Demand Webinar

On-Demand Webinar

For modern software development organizations faced with time-to-market pressures and increasing code complexity, automating key steps in the development lifecycle - including defect detection, builds and deployments - offers important productivity benefits. The ability to immediately assess the impact of changes, generate continuous feedback on product stability, and reduce the effort associated with fixing issues found late in the cycle, allows development organizations to focus on creating higher quality ... More

TAGS: LARGE CODEBASE, STATIC ANALYSIS