Synopsys Releases New Version of Coverity Static Analysis Tool with Enhanced Security for Mobile and Web Applications
MOUNTAIN VIEW, Calif. -- Jan. 19, 2017-- Synopsys, Inc. (Nasdaq: SNPS) today announced a new 8.7 version of its Coverity® static analysis tool with enhanced security analysis for mobile and web applications. Along with the recent acquisitions of Cigital and Codiscope, the latest version of the Coverity tool will provide Synopsys customers with the enterprise-level security analysis and broad programming language support necessary to address today's evolving application security demands.
"Mobile and web applications are used widely across organizations to conduct business and process sensitive information, so addressing critical security vulnerabilities before they cause disruption for employees or customers is essential," said Andreas Kuehlmann, senior vice president and general manager of Synopsys' Software Integrity Group. "Given the rapid pace and scale of software development efforts today, detecting security flaws early in the development process with a highly accurate tool such as Coverity creates efficiencies that benefit all stakeholders."
Mobile Application Security Testing
A core component of the Synopsys Software Integrity Platform, the Coverity automated software testing tool analyzes source code to detect critical security vulnerabilities and defects early in the software development lifecycle. Coverity 8.7 includes major enhancements to the tool's security analysis for Android applications, helping customers detect the most critical vulnerabilities and weaknesses on the OWASP Top 10.
Web Application Security Testing
Coverity 8.7 also provides improved security analysis to detect a wider range of vulnerabilities in JavaScript, Java and C# web applications, and includes support for the new ECMAScript 6 scripting language specification. The JavaScript security analysis in Coverity 8.7 can be customized to improve the accuracy of testing results and reduce false positives and false negatives, which are common pitfalls for application security testing programs.
Secure Software Development Lifecycle Integration
The 8.7 version of the Coverity tool also expands and enhances its desktop analysis for mobile and web applications through plugins with popular Integrated Development Environments (IDEs) including Android Studio, Microsoft Visual Studio, IntelliJ and Eclipse. Developers will be able to perform security analysis from their desktop environment as part of a secure software development lifecycle for Android mobile applications and JavaScript and Node.js web applications. Developers will also be able to run quality analysis for other interpreted languages including PHP, Python and Ruby.
About the Synopsys Software Integrity Platform
Through its Software Integrity Platform, Synopsys provides advanced solutions for improving software security and quality. This comprehensive platform of automated analysis and testing technologies integrates seamlessly into the software development process and enables organizations to detect and remediate quality defects, security vulnerabilities and compliance issues early in the software development lifecycle, as well as to gain security assurance with and visibility into their software supply chain.
About Synopsys
Synopsys, Inc. (Nasdaq: SNPS) is the Silicon to Software™ partner for innovative companies developing the electronic products and software applications we rely on every day. As the world's 15th largest software company, Synopsys has a long history of being a global leader in electronic design automation (EDA) and semiconductor IP and is also growing its leadership in software security and quality solutions. Whether you're a system-on-chip (SoC) designer creating advanced semiconductors, or a software developer writing applications that require the highest security and quality, Synopsys has the solutions needed to deliver innovative, high-quality, secure products. Learn more at www.synopsys.com.
|
Synopsys, Inc. Hot Verification IP
Related News
- Synopsys Bolsters Software Integrity Platform with Acquisition of Static Code Analysis Vendor Goanna Software
- Siemens enhances Nucleus ReadyStart for Arm platforms with enhanced debug, security and stability features
- Inside Secure's Latest Whitebox Software Security Tool Brings Mobile Developers New Levels of Protection, Performance and Control
- Synopsys to Enhance Software Integrity Platform with Acquisition of Black Duck Software
- Synopsys Extends Software Integrity Platform with Acquisition of Forcheck
Breaking News
- Frontgrade Gaisler Unveils GR716B, a New Standard in Space-Grade Microcontrollers
- Blueshift Memory launches BlueFive processor, accelerating computation by up to 50 times and saving up to 65% energy
- Eliyan Ports Industry's Highest Performing PHY to Samsung Foundry SF4X Process Node, Achieving up to 40 Gbps Bandwidth at Unprecedented Power Levels with UCIe-Compliant Chiplet Interconnect Technology
- CXL Fabless Startup Panmnesia Secures Over $60M in Series A Funding, Aiming to Lead the CXL Switch Silicon Chip and CXL IP
- Cadence Unveils Arm-Based System Chiplet
Most Popular
- Cadence Unveils Arm-Based System Chiplet
- CXL Fabless Startup Panmnesia Secures Over $60M in Series A Funding, Aiming to Lead the CXL Switch Silicon Chip and CXL IP
- Esperanto Technologies and NEC Cooperate on Initiative to Advance Next Generation RISC-V Chips and Software Solutions for HPC
- Eliyan Ports Industry's Highest Performing PHY to Samsung Foundry SF4X Process Node, Achieving up to 40 Gbps Bandwidth at Unprecedented Power Levels with UCIe-Compliant Chiplet Interconnect Technology
- Arteris Selected by GigaDevice for Development in Next-Generation Automotive SoC With Enhanced FuSa Standards
E-mail This Article | Printer-Friendly Page |