Latest Content
The global increase in connectivity and reliance on software is opening doors to exploits daily. Software quality and security is more important now than ever before.
-
Read ArticleDARPA Awards GrammaTech $6.2M for Autonomous Botnet Neutralization Research
...
-
Read ArticleIntegrating Static Analysis into Continuous Integration/Continuous Deployment
Continuous integration (CI) and continuous delivery (CD) are gaining traction in software development as teams try to streamline their development processes to avoid the “big bang”...
-
Read ArticleTechnical Debt is Stifling Innovation; but, There is Hope
Apple’s recent announcement at their recent Worldwide Developers’ Conference stated they were going to be reducing the feature count in future versions of iOS and concentrate on...
-
Read ArticleWebinar with AFuzion: Safety, Security, and Agile Development - Pick Any Three
People often connect safety and security with archaic development methodologies: strict processes, long development times, big budgets and...
-
Read ArticleCybersecurity Alerts for Medical Devices are on the Rise – A Cause for Concern, but what can be done?
The Department of Homeland Security (ICS-CERT) recently issued more warnings about cybersecurity vulnerabilities which has become all too common in recent months. In most cases, these...
-
Read Article
ScaleIL Becomes Exclusive Israeli Distributor of GrammaTech’s CodeSonar Static Analysis Tool
...
-
Read ArticleTool Chain Qualification in Safety Critical Systems
Safety critical software usually entails some kind of certification, qualification or approval from a standards body in order to be productized and used by the public. The requirements...
-
Read ArticleOn-Demand Webinar: Automotive 042418
When people talk about static analysis for automotive application the term MISRA-C (Motor Industry Software Reliability Association) immediately...
-
Read ArticleSurprising Uses of Static Analysis: Performance Optimization
Static analysis is typically used to find errors in software, often serious bugs, such as buffer overruns that lead to quality or security issues. GrammaTech CodeSonar is an advanced...
-
Read ArticleDetecting the Beep Vulnerability with CodeSonar
The linux beep utility is a small utility command to literally send a tone to the user’s speaker. A subtle error in the utility gives arise to a local privilege escalation that was...
-
Read ArticleOn-Demand Webinar: Extending Static Analysis to Include Third Party Libraries
Twenty-five percent of embedded projects use content from commercial third parties. This content is often delivered in binary, not in source....
-
Read ArticleAutomatic Detection of Proprietary Coding Rule Violations
Guest Blog by Rob Daulton, Consultant at Valbrio
-
Read ArticleThe Anatomy of a Segmentation Fault – A real life example
I was browsing StackOverflow.com and came across a user running into a segmentation fault in their programming assignment. This problem looked like an ideal case for static analysis....
-
Read ArticleUsing Dynamic Metrics with Static Analysis
GrammaTech CodeSonar is primarily a static analysis tool, but there are some circumstances where it is useful to present dynamic information alongside static results. For example,...
-
Read ArticleNew Features of C++: Small but Useful Features
C++11 added multiple smaller language features as well as the marquee features we've already talked about. Despite these being smaller language features, they're still powerful...
-
Read ArticleEmbedded World 2018 Presentation: Static Analysis ++
vfff Mark Hermeling details how we can make static analysis better using examples from GrammaTech's advanced static analysis tool, CodeSonar.
-
Read ArticleNew Features of C++: Automatic Type Inference
Automatic type inference (or type deduction) is where you allow the compiler to infer the type information used for a declaration by obtaining it from some related...
-
Read ArticleGrammaTech Extends the Reach of Static Analysis
...
-
Read ArticleImproving Static Analysis Around Binary Libraries
INTRODUCTION: Many software projects rely on third party code, system libraries and re-used binary code from other projects. Advanced static analysis tools reason about the program...
-
Read ArticleNew Features of C++: Move Semantics
Move semantics are another game-changer introduced in C++11. One large complaint about writing C++ code was that copy construction and copy assignment can cause performance issues...
-
Loading More...
