What Is PA-DSS?
If you develop payment application software, you must ensure that it is secure and compliant with PA DSS. Read on to learn more about the payment application security standard. What You Need to Know About PA DSS The Payment Application Data Security Standard (PA DSS) is a part of PCI DSS and is a global […]
Guide for Software Development & Software Security
In order to ensure an efficient, secure and successful software development project, there are many factors that you and your team must consider when starting a new project. The most common and pertinent considerations for many include defining the requirements of the project, selecting the correct processes for each stage of the software development project, […]
5 Ways to Improve Developer Output With Static Analysis
Developers often have to produce efficient, effective code under tight deadlines. Without the proper software development tools to support this work, coding errors and vulnerabilities could occur. For that reason, it is important to use a static code analysis tool, which verifies the security, quality and compliance of your code as it is being written. […]
How to Prevent Cybersecurity Threats With Secure Code
Unfortunately, cybersecurity attacks are an ever-present threat for organizations of all sizes and industries. In fact, a cybersecurity threat is estimated to occur every 39 seconds. For that reason, it is important to understand the how, what and why of cybersecurity threats. The How, What and Why of Cybersecurity Threats Any malicious attack that threatens […]
What is Differential Analysis?
Differential analysis is an emerging solution for static analysis tools. It is a relatively recent solution, but it’s important to understand what it is, how it works and why you should care. What’s Differential Analysis? Put simply, differential analysis is a form of “fast feedback” static code analysis. By using system context data from previous […]
DevSecOps for Security and Safety-Critical Software Development
One of the most effective software development practices for safety-critical software is DevSecOps. Put simply, DevSecOps automates development and security processes to ensure the security and reliability of software. Here, we explain what you need to know about DevSecOps. What You Need to Know About DevSecOps Automation DevSecOps is a software development practice that automates […]
Klocwork Is the Ideal Static Analysis Tool for DevOps
Klocwork identifies software security, quality and reliability issues for C, C++, C# and Java helps to enforce compliance with standards. Its in-depth, accurate and precise analysis results have earned Klocwork the trust of industry leaders across a variety of industries. However, Klocwork is more than just a static code analysis tool; it’s also a static […]
Software Safety vs. Security: What’s the Difference?
When developing software, you must ensure that that it is both safe and secure. But what is the difference between your code being safe, and your code being secure? Here, we discuss the differences between the two, and explain why you need to ensure that your software is both safe and secure. The Difference Between […]
What Is DISA STIG?
You need to ensure that your software is secure and safeguarded from security vulnerabilities. DISA STIGs help you ensure the security of your software. Read on to learn how. What You Need to Know About DISA STIG Defense Information Systems Agency (DISA) provides technical guides referred to as Security Technical Implementation Guides (STIGs). DISA is […]
How to Improve Code Quality, Efficiently, with Static Analysis
As hard as they try, no programmer is perfect. Testing and manual code reviews cannot find every problem in their code, so software vulnerabilities and bugs persist. Unfortunately, the amount of software errors will only continue to grow as your systems get larger and more complex. Which begs the question: How can you find all […]
Add Static Code Analysis to Your CI/CD Pipelines
An efficient CI/CD pipeline is necessary for accelerating software delivery without sacrificing quality, and a static code analysis tool is an essential part of that pipeline. A static code analysis tool inspects your code as it is being written to identify defects, vulnerabilities and compliance issues — without having to run the program. What’s more, […]
CI/CD Best Practices for Software Development
Continuous integration (CI) and continuous delivery (CD) are popular software development practices for automation and shortening feedback times. However, set up improperly, your CI/CD pipelines could instead cause delays in development. For that reason, review CI/CD best practices to ensure that your pipelines are effective and efficient. What You Need to Know About Continuous Integration […]
Continuous Integration Overview
To improve the efficiency of your software development workflow, you should use continuous integration. We’ll explain what continuous integration is, why it’s important and how it can help you. Continuous Integration in DevOps Continuous integration is the automation of building and testing code each time a change is made in the codebase, and then committing […]
What Is a CI/CD Pipeline? How to Improve CI/CD
The most effective way to ensure that your CI/CD pipeline is efficient is to use the right tool, like a static code analyzer. Here we explain what is a CI/CD pipeline and how a static analysis tool can help. What You Need to Know About CI/CD Pipelines The easiest way to understand a CI/CD pipeline […]
What is CERT? Overview of CERT Secure Coding
As you write code, you must ensure it is secure and safeguarded from potential security threats. That’s why CERT is essential. Read on to learn more about CERT. What You Need to Know About CERT Secure Coding CERT is a secure coding standard that supports commonly used programming languages, like C, C++ and Java. The […]
What Are Security Standards? Secure Coding Standards Overview
To read more, please visit: https://www.perforce.com/blog/qac/secure-coding-standards Mitch Ashley
What Is AppSec? An Overview
An estimated 84% of security incidents happen at the application layer. And, with the number of cybersecurity threats steadily rising year-over-year, application security (AppSec) has become absolutely essential. Application security refers to finding, fixing and preventing cybersecurity vulnerabilities throughout the entire development life cycle. By enforcing application security measures, you are able to ensure that […]
Shifting Left and Static Code Analysis with Perforce
Perforce Product Manager Stuart Foster, and Evangelist Steve Howard, join Mitch Ashley to discuss the importance of creating security software from the beginning of the development process. We discuss shift left, SAST, source code scanning and other pursuits towards this goal. The video is immediately below, followed by the transcript of the conversation. Enjoy! Transcript […]