What is SAST? Overview + SAST Tools
Static Application Security Testing Overview With the growing number of cybersecurity threats, you must ensure that your software is protected against potential vulnerabilities and threats. One of the most beneficial practices is to use static application security testing (SAST). What You Need to Know Static application security testing is a type of software test used […]
Top 10 Common Software Vulnerabilities
An essential part of an effective software security process is being familiar with software vulnerabilities, which are flaws or weaknesses in your code. Often, testing and manual code reviews are unable to identify every single vulnerability, which can impact the performance and security of your software. For that reason, it is important to have a […]
What Is ISO 21434? Compliance Tips for Automotive Software Developers
What Is ISO 21434? Compliance Tips for Automotive Software Developers To read more, please visit: https://www.perforce.com/blog/qac/ISO-21434-Compliance Mitch Ashley
Top 10 Embedded Security Vulnerabilities
Nearly all of detected security vulnerabilities can be attributed to just 10 types. Here, we discuss the most common cybersecurity vulnerabilities and offer guidance on how to mitigate their risk. Vulnerability 10: Numeric Errors Numeric errors can refer to several different categories of problems, including wrap around errors, improper validation of array index, integer overflow, […]
5 Ways to Accelerate Standards Compliance With Static Code Analysis
In mission- and safety-critical industries, static code analysis is essential to facilitating the development of robust and reliable software. However, according to VDC Research, a B2B technology market intelligence and consulting firm, only 27% of embedded developers report using static code analysis tools. This raises an important question: Why is the adoption rate for static […]
Best Practices for a Secure Software Development Project
The beginning of any new software development project can be daunting, as there are many decisions that need to be made and considerations that must be thought through. Often this includes defining project requirements, selecting the right processes, choosing the right tools and ensuring software security. In this webinar, we will walk you through the […]
What Is PA-DSS?
If you develop payment application software, you must ensure that it is secure and compliant with PA DSS. Read on to learn more about the payment application security standard. What You Need to Know About PA DSS The Payment Application Data Security Standard (PA DSS) is a part of PCI DSS and is a global […]
What Is OWASP?
With cybersecurity attacks rising, it is important for you to enforce secure software best practices, like OWASP and the OWASP Top 10. OWASP helps you to safeguard your code against software security vulnerabilities. Continue reading to learn why OWASP is important. What You Need to Know About OWASP The Open Web Application Security Project (OWASP) […]
What is the NIST Cybersecurity Framework?
Cybersecurity threats are easier to handle when you have a framework to build off of. That’s why NIST developed the Cybersecurity Framework. Learn more. What You Need to Know About the NIST Cybersecurity Framework The National Institute of Standards and Technology, or NIST, helps organizations to better understand and manage their cybersecurity risks. NIST does […]
Klocwork Is the Ideal Static Analysis Tool for DevOps
Klocwork identifies software security, quality and reliability issues for C, C++, C# and Java helps to enforce compliance with standards. Its in-depth, accurate and precise analysis results have earned Klocwork the trust of industry leaders across a variety of industries. However, Klocwork is more than just a static code analysis tool; it’s also a static […]
5 Ways to Improve Developer Output With Static Analysis
Developers often have to produce efficient, effective code under tight deadlines. Without the proper software development tools to support this work, coding errors and vulnerabilities could occur. For that reason, it is important to use a static code analysis tool, which verifies the security, quality and compliance of your code as it is being written. […]
What Is DISA STIG?
You need to ensure that your software is secure and safeguarded from security vulnerabilities. DISA STIGs help you ensure the security of your software. Read on to learn how. What You Need to Know About DISA STIG Defense Information Systems Agency (DISA) provides technical guides referred to as Security Technical Implementation Guides (STIGs). DISA is […]
Software Safety vs. Security: What’s the Difference?
When developing software, you must ensure that that it is both safe and secure. But what is the difference between your code being safe, and your code being secure? Here, we discuss the differences between the two, and explain why you need to ensure that your software is both safe and secure. The Difference Between […]
DevSecOps for Security and Safety-Critical Software Development
One of the most effective software development practices for safety-critical software is DevSecOps. Put simply, DevSecOps automates development and security processes to ensure the security and reliability of software. Here, we explain what you need to know about DevSecOps. What You Need to Know About DevSecOps Automation DevSecOps is a software development practice that automates […]
What is Differential Analysis?
Differential analysis is an emerging solution for static analysis tools. It is a relatively recent solution, but it’s important to understand what it is, how it works and why you should care. What’s Differential Analysis? Put simply, differential analysis is a form of “fast feedback” static code analysis. By using system context data from previous […]
How to Prevent Cybersecurity Threats With Secure Code
Unfortunately, cybersecurity attacks are an ever-present threat for organizations of all sizes and industries. In fact, a cybersecurity threat is estimated to occur every 39 seconds. For that reason, it is important to understand the how, what and why of cybersecurity threats. The How, What and Why of Cybersecurity Threats Any malicious attack that threatens […]
Guide for Software Development & Software Security
In order to ensure an efficient, secure and successful software development project, there are many factors that you and your team must consider when starting a new project. The most common and pertinent considerations for many include defining the requirements of the project, selecting the correct processes for each stage of the software development project, […]
What is CERT? Overview of CERT Secure Coding
As you write code, you must ensure it is secure and safeguarded from potential security threats. That’s why CERT is essential. Read on to learn more about CERT. What You Need to Know About CERT Secure Coding CERT is a secure coding standard that supports commonly used programming languages, like C, C++ and Java. The […]
CI/CD Best Practices for Software Development
Continuous integration (CI) and continuous delivery (CD) are popular software development practices for automation and shortening feedback times. However, set up improperly, your CI/CD pipelines could instead cause delays in development. For that reason, review CI/CD best practices to ensure that your pipelines are effective and efficient. What You Need to Know About Continuous Integration […]
Add Static Code Analysis to Your CI/CD Pipelines
An efficient CI/CD pipeline is necessary for accelerating software delivery without sacrificing quality, and a static code analysis tool is an essential part of that pipeline. A static code analysis tool inspects your code as it is being written to identify defects, vulnerabilities and compliance issues — without having to run the program. What’s more, […]
How to Improve Code Quality, Efficiently, with Static Analysis
As hard as they try, no programmer is perfect. Testing and manual code reviews cannot find every problem in their code, so software vulnerabilities and bugs persist. Unfortunately, the amount of software errors will only continue to grow as your systems get larger and more complex. Which begs the question: How can you find all […]
What Are Security Standards? Secure Coding Standards Overview
To read more, please visit: https://www.perforce.com/blog/qac/secure-coding-standards Mitch Ashley
What Is a CI/CD Pipeline? How to Improve CI/CD
The most effective way to ensure that your CI/CD pipeline is efficient is to use the right tool, like a static code analyzer. Here we explain what is a CI/CD pipeline and how a static analysis tool can help. What You Need to Know About CI/CD Pipelines The easiest way to understand a CI/CD pipeline […]
Showing the 24 most recent articles. Additional archive pages are not yet available.