资源描述:
《Coverity Overview - Customer facing - 2015-06-08》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、CoverityImprovesecurity,qualityandspeedBusinessprioritiesSECURITYSPEED•Codebasesarebecominglargerand•Allmajorsoftwarebusinesshaveconvertedorexponentiallymorecomplex.Everythingisareconvertingtoagiledevelopment.inter-connected—everythingispotentially•Fastsprintsandtimetomarketpressu
2、resvulnerable.createacatch-22:qualityvs.speed.•Securityincidentsareontherise.•Managingproductivity/costefficiencyiskey.•Securityisoftentreatedasanend-of-lifecyclecheckpoint,withlimitedvisibilityandimpact.CoverityprovidestheonlysolutionforautomatingtestinginanagileCoverityistheonly
3、solutionthatenvironment,zeroinginonthegapsinexposes,addresses,andprioritizesnewcode/criticalcodetoensurethoserealsecurityissuesindevelopment,inaretestedfullypriortorelease.sourcecodeasit’swritten,dramaticallysavingcostandtimewhileminimizingrisk.©2015Synopsys,Inc.2HowCoverityhelpsD
4、evelopmentQASecurityAddressqualityandImproveblackboxEstablishandenforcesecurityissuesastestingbyfocusingsecuritytestingcodeisdevelopedonriskandchangepoliciesindevelopmentFocusunittestIdentifygapsdevelopmentandinmanualandIdentifyriskearlierintestexecutiononautomatedtestingthelifecy
5、clecriticalcodeplansEmpowerdeveloperswhilemaintainingcontrol©2015Synopsys,Inc.3WhyCoverityAccurateActionableIntegratedProvenfalsePrescriptiveIDEpositiverateofremediationDefecttrackinglessthan10%adviceSCM,Build/CI“CoverityisreallygreatanditswebGUIisfuntouse,too.Iwasabletoidentifyan
6、dfixresourceleaks,NULLpointerissues,bufferoverflowsandmissingchecksallovertheplace.”-Christian,Pythondeveloper©2015Synopsys,Inc.4CoverityinanutshellTraining/DesignImplementationVerificationReleaseResponseRequirementsGotothesource.Agile,butfaster.IncreasedNo“uh-ohs.”visibilityandVu
7、lnerabilitiesandAutomatedsecurityPost-launchincidentsconfidence.defectscaughtintestsfocusingonriskandcodereworksourcecodeasit’sandchange.minimized.Securityintegratedwritten,dramaticallyalongthelifecycle,Testredundancysavingcostandtime.nottreatedasaneliminated,speedingafterthought.
8、timetomarket.Belovedandrespectedb