Deep Java source code analysis
Posted on 18 September 2012.
GrammaTech announced CodeSonar for Java which works on all Java code, including code written for Android.


The analysis flags quality and security defects. It also works seamlessly with CodeSonar for C/C++, allowing developers to analyze code written in multiple languages and manage warnings in a single location, saving time.

CodeSonar for Java also works in parallel with the popular open-source Java static-analysis engines FindBugs and PMD. Results calculated by FindBugs and PMD are automatically imported into CodeSonar, where developers can take advantage of CodeSonarís superb warning management infrastructure and reporting.

Among the benefits are easier and richer annotation of warnings, tracking of code-level metrics and visualization of quality trends. Users are also able to leverage CodeSonarís numerous workflow automation features, such as the automatic assignment of a warning to the developer that made relevant modifications to the file.

CodeSonar has long been the software-analysis tool of choice for embedded developers working on mission-critical applications such as satellites, avionics, industrial controls and medical devices.

Companies outside the safety-critical space are also adopting CodeSonar to improve software reliability and security. This includes organizations developing software for wireless devices, networking equipment and consumer electronics.





Spotlight

Bash Shellshock bug: More attacks, more patches

Posted on 29 September 2014.  |  As vendors scramble to issue patches for the GNU Bash Shellshock bug and companies rush to implement them, attackers around the world are probing systems for the hole it opens.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Sep 30th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //