Defect Detection

The term "bug" used to describe a defect in software code is misleadingly benign. In reality, the costs and risk of detecting and correcting security vulnerabilities and quality defects late in the software development process can be high. When those bugs escape into the market and are discovered by customers, the fallout can affect the bottom line and damage reputations.

Static Source Code Analysis

Static source code analysis is fast becoming a standard part of the development process for leading software development organizations that build or maintain mission-critical applications. For these organizations, software bugs can seriously affect business. Bugs increase risk, including:

Software development costs
The likelihood of annoying or losing customers
Reduced developer productivity

Identifying and correcting critical bugs early in the software development cycle mitigates these risks and the costs associated with them. Static source code analysis tools identify potentially catastrophic security vulnerabilities and quality defects automatically and accurately early in the development process. Static analysis is efficient because it does not require running code - it can operate even before software is compiled and integrated. This approach improves the quality of software while enhancing developer productivity.

Klocwork: Serious Source Code Analysis

Klocwork Insight is a mature, scalable, static source code analysis solution that enables accurate and efficient bug detection earlier in the development process than any other product. It can be deployed at the developer desktop at a cost that is orders of magnitude lower than correcting the same defect at build integration, later test phases or after the product is released.

Klocwork Insight also has the unique ability to connect individual C, C++ and Java developers to the full system architecture to ensure the fullest possible coverage of the code base -w including allowing developers to extend the analysis to suit their needs. With enterprise scalability, Klocwork enables organizations to integrate static analysis best practices to best suit their development processes and environments.

Relevant Resources

FACT SHEET: Klocwork Corporate Overview

Klocwork delivers tools that enable developers to identify critical security vulnerabilities, quality defects and architectural issues quickly and accurately. Klocwork products integrate within the normal development environment [...]

WHITE PAPER: Software Verification for Medical Devices

Producing high-quality, feature-rich software while meeting regulatory guidelines presents a unique set of challenges for those developing medical device software. In this paper for medical device software managers [...]

WHITE PAPER: Streamlining D0-178B Efforts with Static Analysis

Given the complexity of today's airborne software systems, the use of automated tools can assist in the successful on-time and on-budget delivery of these projects. Automated source code analysis tools locate [...]