Latest Content
The global increase in connectivity and reliance on software is opening doors to exploits daily. Software quality and security is more important now than ever before.
-
Read ArticleWebinar Recording - Why Realizing Safe, Secure Software Requires Building on Strong Foundations
The challenge of designing safe and secure software systems has never been greater. The emergence of increasingly complex cyber-physical systems, such as...
-
Read ArticleStatic Analysis in Automotive SPICE
The Automotive SPICE (software process improvement and capability determination) is a software development process standard that outlines the maturity model for software development,...
-
Read ArticleUsing CodeSonar to Evaluate Software for the 2019 CWE Top 25 Most Dangerous Software Errors
The Common Weakness Enumeration (CWE) Top 25 most dangerous software errors, a.k.a., the CWE Top 25 is a list of the most common weaknesses that lead to security vulnerabilities. It is...
-
1:47Watch VideoWork at GrammaTech
-
Read ArticleIntroducing MISRA C Coding Standard to an Existing Code Base
The intent of the Motor Industry Software Reliability Association (MISRA) C coding standard was to define a subset of the C language that minimizes the possibilities of errors. Although...
-
Read ArticleGrammaTech on List of Top Ten Homeland Security Solution Providers
...
-
Read ArticleThe Role of Static Analysis in Assessing Trustworthiness of IIoT Software
In a previous post I introduced the Industrial Internet Consortium (IIC), the reference architecture and the concepts of trustworthiness used in their security framework. Since that...
-
Read ArticleHow Sound Static Analysis Complements Heuristic Analysis
Not all static analysis tools work the same, there are in fact a spectrum of tools that use a variety of techniques ranging from relatively simple syntactic analysis through very...
-
Read ArticleHow Sound Static Analysis Complements Heuristic Analysis
Not all static analysis tools work the same, there are in fact a spectrum of tools that use a variety of techniques ranging from relatively simple syntactic analysis through very...
-
4:21Watch VideoLife at GrammaTech
Interested in applying to GrammaTech? Here we take an inside look at our corporate culture, discuss benefits, tour the office, and offer an introduction to all things GrammaTech - take a look!
-
Read ArticleTainted Data and Format String Attack Strike Again
A recent code execution vulnerability (we also call this a code injection vulnerably) was discovered in Palo Alto Networks’ GlobalProtect SSL VPN, a product that handles SSL handshakes...
-
Read ArticleThe Role of Static Analysis in the SAE J3061 Cybersecurity Process Framework
The Society of Automotive Engineers (SAE) J3061 cybersecurity process framework was created to address a large disconnect between advances in automotive software and the increasing...
-
Read ArticleGrammaTech Joins the MISRA Committee
...
-
Read ArticleShift Left Quality and Security with Automated Unit Testing, Dynamic and Static Analysis
Our partner, Vector Software, recently announced the official release of the VectorCAST and GrammaTech CodeSonar integration. This prompted this post to discuss the role of static and...
-
Read ArticleWhat is Static Application Security Testing (SAST)?
We often get the question from developers and engineering managers: “What is SAST?” often followed by “Ok, what do SAST tools do exactly for security?” Many people know the acronym as...
-
Read ArticleMerging of the MISRA C++ and AUTOSAR C++ Guidelines is Good News for Safety Critical Software Development
The MISRA Consortium recently announced the merger of MISRA C++ 2008 and AUTOSAR C++14 into a common guideline. This is positive news since it combines two key standards for coding in...
-
Read ArticleLinux Foundation’s ELISA Project to Bring Linux to Safety Critical Systems
The Linux Foundation’s announcement of the ELISA (Enabling Linux in Safety Applications) project was of interest to us because it requires a significant effort in evaluating open source...
-
Read ArticleWebinar Recording - What's New in CodeSonar 5.1?
Interested in upgrading to CodeSonar 5.1? In this webinar, Mark Hermeling, Senior Director of Product Marketing, will walk through all of the new features...
-
Read the documentEasing the Adoption of Static Analysis into Existing Projects
-
Read the documentDevSecOps - Integrating Static Application Security Tools (SAST) in DevSecOps
-
Loading More...
