Klocwork product documentation is available here.
As a manufacturer of medical electronics, meeting the FDA's rigorous safety and quality standards is crucial to Stockert. With the safety of their devices depending significantly on the quality of software they ... More
When it comes to security, embedded software presents a unique set of challenges for application development and engineering teams. To ensure your embedded software is secure, you must start by understanding the threats ... More
In the push to meet demands for functionality and speed, software teams are moving away from single processor architectures at a rapid rate. But the realities of developing software for these next-generation ... More
Panda Security conducted a rigorous evaluation to determine the best source code analysis tool to integrate into its software test and quality process. After trying a number of tools, Panda Security selected Klocwork, which is now an important time saving component of the company’s comprehensive software regression test suite.
Video demonstration: using Klocwork Review for integration build reporting and metrics on your source code
This Tips and Tricks guide breaks down the topic of software security assurance into a series of questions that fall into these four key areas: Managing for Software Security, Developing for Software Security, Auditing for Software Security, and Testing for Software Security.
Sencore needed a static analysis tool to help catch software defects to ensure high-reliability video transmissions to its customers. Sencore used Klocwork Insight to analyze its software builds for memory leaks and critical issues that might compromise the quality of the video stream its solutions deliver.
The value of peer code review is undeniable. But despite this, it continues to be a much-maligned milestone in the software development cycle. Code reviews are difficult to implement consistently, the review is often left incomplete, and let’s be honest, developers generally don’t like doing them. In this latest white paper, Klocwork provides specific recommendations on how organizations can implement a simple, effective code review process that takes advantage of the latest tools and technologies.
Developing software for mission-critical applications such as military, aerospace, and medical devices requires aggressive strategies for reducing risk throughout the development lifecycle. This brief session looks at three crucial components of an effective risk management strategy that can be achieved with source code analysis, including stabilizing code early in development, automating metrics and measurement and creating a disciplined approach to producing maintainable code.
Video Demonstration: See how Klocwork Checker Studio is used to create custom static analysis checkers to find defects and security vulnerabilities.
When it comes to security, embedded software presents a unique set of challenges for application development and engineering teams. To ensure your embedded software is secure, you must start by understanding the threats that can make it susceptible to attack and then establish appropriate counter measures. Designed for embedded software engineers and security specialists, this on-demand webinar identifies the characteristics of embedded software that make it vulnerable to security threats, discusses the importance ... More
Automated source code analysis locates and describes areas of weakness in source code. Those weaknesses might be security vulnerabilities, logic errors, implementation defects, concurrency violations, rare boundary conditions, or many other types of problem-causing code. The name of the associated research field is static analysis and while the technology has been around for decades - primarily in the form of lint tools - modern static analysis has little in common with its well known but much maligned ... More
Join our guest speaker Dave West, Senior Analyst, Forrester Research, Inc., as he reviews the findings of a recent code review study and discusses why it’s time for software development organizations to exploit modern technology to improve the code review process. Learn about the key challenges of code review and recommendations on ways to improve the process right from the analyst himself.
We're setting a new standard for static analysis tools with the launch of Klocwork Insight 9.5. The latest release of our flagship product brings on-the-fly static analysis capabilities to the desktop, allowing developers to fix critical defects the moment they're introduced. Features covered in this webinar: On-the-fly static analysis that instantly underlines defects as code is written Drag and drop reporting that answers complex questions about the security and reliability of your code On-the-fly impact ... More
With the types of security attacks, what they're targeting, and where they're coming from continuing to grow, the problem of software security can seem overwhelming. But with an alarming number of security vulnerabilities starting within the software code itself, writing clean code becomes an important weapon in your defense against security attacks. This article from SD Times solicits input from industry experts on the reality of software security, the common security mistakes being made, and how to avoid ... More
As a provider of payment software for banks and merchants worldwide, ACI Worldwide puts a great deal of emphasis on code quality and security. Given the nature of their business and need for PCI compliance, ensuring their source code is intruder resistant and free from defects is paramount. Gain insight from their first-hand experience qualifying, selecting and deploying a source code analysis solution and learn why they selected Klocwork.
To keep pace with ever-increasing customer demands on software functionality and time-to-market expectations, software developers have had to evolve the way they develop code to be both faster and higher quality. As part of this trend, Agile development practices are becoming more commonplace. However, to fully realize the benefits of Agile development, it is critical to have a repeatable process for ensuring code is as free of defects and security vulnerabilities as possible. This paper examines how the use of ... More
This exclusive study commissioned by Klocwork and conducted by Forrester Consulting provides valuable data and insights that will help you benchmark and improve your peer code review practices, including: top code review challenges; respondent's feedback on code review benefits, frequency, and technologies; and recommendations on modernizing code reviews.