Klocwork product documentation is available here.
Software teams are moving away from single processor architectures at a rapid rate. But the realities of developing software for these next-gen architectures is introducing significant complexity when it comes to ... More
Tasked with building the embedded software component for a next-generation human prosthetic, the Johns Hopkins University Applied Physics Laboratory software team turned to Klocwork's source code analysis tools to help ... More
To ensure your embedded software is secure, you must start by understanding the threats that can make it susceptible to attack and then establish appropriate counter measures. Designed for embedded software engineers ... More
Many source code analysis deployments suffer from ‘batch processing syndrome’ where most of the analysis is centralized and results are delivered to the users. This short, high-level video suggests there’s a better way. (Hint: it’s all about on-the-fly static analysis.)
Migrating embedded software to Intel® architecture always requires an evaluation of code compatibility and dependencies between the existing code base and the Intel platform. Particularly in cases where the code base is a large, complex, legacy system - or a system hardcoded for big-endian memory - it is critical to understand the scope and eliminate the risk of the migration. This article on page 138 of the Intel Technology Journal describes how C/C++ source code analysis can help with architecture ... More
This video looks at how Klocwork Insight can help migrate your code to Intel architecture, addressing issues like complex code bases and hardcoded endian memory.
This exclusive report, using data from VDC Research's 2010 Embedded Engineering Survey, highlights the new realities of developing software for multicore and multiprocessor architectures. Get the report and learn how growth in these advanced platforms is introducing a new set of challenges for embedded software engineering teams, impacting project schedules, and causing cost overruns.
For Canfield Scientific, which specializes in medical image capture systems and software for the medical and skin care industry, performing static analysis on its software helps the company catch potential software defects before they reach the customer. This case study looks at how Canfield uses Klocwork's on-the-fly analysis in Visual Studio to achieve measurable productivity and quality gains.
Klocwork helps developers create more secure and reliable software. Our tools analyze source code on-the-fly, simplify peer code reviews, and extend the life of complex software. Hundreds of customers in the mobile device, consumer electronics, medical technologies, telecom, military and aerospace sectors rely on our development tools.
Developing software for mission-critical applications such as military, aerospace, and medical devices requires aggressive strategies for reducing risk throughout the development lifecycle. This brief webinar looks at three crucial components of an effective risk management strategy that can be achieved with source code analysis, including stabilizing code early in development, automating metrics and measurement, and creating a disciplined approach to producing maintainable code.
Klocwork provides the most comprehensive range of static source code analysis products that touch the entire development organization, from the developer desktop to system-wide bug and architecture analysis. Klocwork customers include the largest global companies and software development organizations right down to individual developers.
Software teams are moving away from single processor architectures at a rapid rate. But the realities of developing software for these next-gen architectures is introducing significant complexity when it comes to identifying software issues - specifically concurrency errors and endian incompatibilities. This paper looks at the challenges of developing for multicore/multiprocessor environments, explains how Klocwork's tools can be used to address them, and provides two examples in prominent open source projects.
In order for Polycom’s telepresence, video and voice products to deliver a reliable and seamless "face to face" customer experience every time, they use Klocwork Insight to deliver more stable and reliable code. Read this case study to see how source code analysis helped Polycom improve developer productivity and customer satisfaction.
Looking for a way to understand and visualize your complex software code, identify re-usable components, and re-engineer your code for better optimization? Klocwork Insight allows software architects to experiment with graphical models of their source code without impacting the system. This webinar provides a technical deep-dive into the following advanced software architecture analysis capabilities: code discovery and comprehension, Impact analysis, and architecture optimization.
To augment manual code testing, Spirent Communications introduced Klocwork Insight into its software development process, enabling the company to develop higher-quality software, reduce errors in the field and maintain its reputation as a leader in the network and communications technology industry.
As a manufacturer of medical electronics, meeting the FDA's rigorous safety and quality standards is crucial to Stockert. With the safety of their devices depending significantly on the quality of software they develop, Stockert invested in Klocwork's source code analysis tools. Learn how their static analysis deployment has helped Stockert achieve FDA certifications, gain more trust in their code quality, and increase development efficiency.
The value of peer code review is undeniable. But despite this, it continues to be a much-maligned milestone in the software development cycle. Code reviews are difficult to implement consistently, the review is often left incomplete, and let’s be honest, developers generally don’t like doing them. In this paper, Klocwork provides specific recommendations on how organizations can implement a simple, effective code review process that takes advantage of the latest tools and technologies.
In this on-demand webinar hosted by Klocwork, learn where source code analysis can be used in your development process, the problems that it solves, and how the technology can be used to streamline a number of productivity bottlenecks in your development process.
Peer code reviews are a vital step in the software development cycle but everyone knows the challenges involved. Learn how a tools-based approach to peer code reviews can unleash the benefits of this important development milestone by incorporating social media concepts, enabling collaboration and communication amongst reviewers, and combining static analysis with code reviews.
Tasked with building the embedded software component for a next-generation human prosthetic, the Johns Hopkins University Applied Physics Laboratory software team turned to Klocwork's source code analysis tools to help ensure the software's reliability and boost developer productivity.
Sencore needed a static analysis tool to help catch software defects to ensure high-reliability video transmissions to its customers. Sencore used Klocwork Insight to analyze its software builds for memory leaks and critical issues that might compromise the quality of the video stream its solutions deliver.
Feeling that powerful analysis techniques are often overshadowed by testing and review when it comes to creating high quality software, representatives at Lawrence Livermore National Labs wrote this article which makes a compelling business case for the use of static analysis tools. The article contains results from two case studies where automated source code analysis tools were run on C++ code.
We're setting a new standard for static analysis tools with the launch of Klocwork Insight 9.5. This new release offers on-the-fly static analysis that instantly underlines defects as code is written; drag and drop reporting that answers complex questions about the security and reliability of your code; and on-the-fly impact analysis that checks if a reported issue exists in other code bases, branches or builds.
To keep pace with ever-increasing customer demands on software functionality and time-to-market expectations, software developers are having to develop higher quaility code faster. As a result, Agile development is becoming more common. However, to fully realize the benefits of Agile, a repeatable process for ensuring code is free of defects and security vulnerabilities is critical. This paper examines how source code analysis can enhance the Agile development process and empower Agile teams.
Panda Security conducted a rigorous evaluation to determine the best source code analysis tool to integrate into its software test and quality process. After trying a number of tools, Panda Security selected Klocwork, which is now an important time saving component of the company’s comprehensive software regression test suite.
In an Agile context where software production is performed in short, feature-driven iterations, it's critical that bugs are found and removed from code as early as possible. In this session, we examine the evolution of source code analysis technology and discuss why and how it should be deployed for maximum benefit within an Agile development process.
As a leading developer and manufacturer of Carrier Ethernet edge and aggregation equipment, Overture has a zero-tolerance policy for in-field failures. This case study looks at Overture's approach to evaluating competing source code analysis tools and discusses how they implemented Klocwork Insight to ensure potentially outage-causing defects don't make it into the field.
As embedded software becomes more mobile and connected, organizations must take additional steps to ensure their code is secure. To achieve this and combat ever-changing security threats, software engineering teams need to incorporate threat modeling, combined with updated tools and processes into their development plans.This paper examines threat modeling and explains how it can be used in concert with defensive coding, automated source code analysis, peer code review, and penetration testing to both identify and ... More
To ensure your embedded software is secure, you must start by understanding the threats that can make it susceptible to attack and then establish appropriate counter measures. Designed for embedded software engineers and security specialists, this webinar identifies the characteristics of embedded software that make it vulnerable to security threats, discusses the importance of threat modeling, and provides specific mitigation activities all embedded teams should employ.
No one wants to be on the hot seat when a critical vulnerability is exploited in the field or when a coding mistake causes product recalls, brand damage, or revenue losses. Source code analysis helps developers and development teams avoid this exposure by performing the most rigorous form of automated code review possible. This paper discusses what issues can be found with source code analysis, why developers should use them, and why the technology should be apart of every development build chain.