Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Vulnerabilities

Coverity Updates Software Testing Platform

Coverity, a provider of software quality, testing, and security tools, has released the latest version of its integrated suite of testing solutions that enables organizations to find and fix critical quality and security issues earlier in the software development lifecycle (SDLC).

Coverity, a provider of software quality, testing, and security tools, has released the latest version of its integrated suite of testing solutions that enables organizations to find and fix critical quality and security issues earlier in the software development lifecycle (SDLC).

With version 7.5 of the Coverity Software Testing Platform, the company said that it has expanded the collaboration capabilities between Development and Quality Assurance (QA) teams, which will result in reduced software development costs and higher end-product quality.

Coverity The new platform release also includes several new analysis algorithms to improve Coverity’s support for C# and Java codebases.

New features in the Coverity platform include:

Test prioritization and execution: The new Coverity Test Advisor – QA Edition, which is based on technology acquired from Kalistick, enables QA teams to monitor the execution and results of their tests, then identify which tests are most critical based on changes to the source code and testing gaps. This enables faster time to market while ensuring the most relevant tests are executed and testing gaps are addressed.

Breadth and depth of C# and Java code analysis: This release includes 12 new and enhanced analysis algorithms for finding C# and Java issues. These algorithms further improve the accuracy of the platform’s defect detection capabilities, providing developers with the information they need to quickly troubleshoot and fix critical defects such as concurrency issues, which are difficult to detect and result in performance issues and incorrect behavior of the application.

Expanded Java web application security coverage: With the addition of several new security analysis algorithms – including a Cross-Site Request Forgery (CSRF) checker and a Risky Crypto checker – the Coverity platform now offers extensive coverage for the Open Web Application Security Project (OWASP) Top 10 and Common Weakness Enumeration (CWE) security vulnerabilities for Java applications.

Improved integration with the developer workflow: The Coverity platform’s desktop analysis capability enables developers to resolve issues almost immediately from within their IDE. Defects can be automatically assigned for remediation to the developer who modified the relevant lines of code, which helps accelerate issue resolution and improves overall productivity.

“With this new release of the Coverity platform, we have introduced a new approach to software testing: providing QA teams with insight into what testing has been done in Development, and offering Development teams the opportunity to provide input into QA testing processes,” said John Chilton, senior vice president and general manager for Coverity.

Advertisement. Scroll to continue reading.

Coverity was recently acquired by Synopsys in a deal valued at roughly $375 million. 

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Mike Dube has joined cloud security company Aqua Security as CRO.

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

More People On The Move

Expert Insights

Related Content

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

IoT Security

A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car...

Vulnerabilities

A researcher at IOActive discovered that home security systems from SimpliSafe are plagued by a vulnerability that allows tech savvy burglars to remotely disable...

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Vulnerabilities

Patch Tuesday: Microsoft warns vulnerability (CVE-2023-23397) could lead to exploitation before an email is viewed in the Preview Pane.

IoT Security

A vulnerability affecting Dahua cameras and video recorders can be exploited by threat actors to modify a device’s system time.