Coverity™ Introduces New Static Analysis Solution for C#

July 23, 2008, 01:15 AM — 

Coverity™, Inc., the leader in improving software quality and security, announced Coverity Prevent™ for C#. The product utilizes a new analysis engine developed by Coverity’s research and development lab that is designed specifically for detecting defects in applications built on Microsoft’s .NET framework. Prevent for C# expands the language coverage of Coverity’s static analysis products, and brings the company’s proven expertise in automatic defect detection to developers programming in C#. Over 450 development organizations currently use Coverity Prevent to ensure the quality and security of their C/C++ and Java code.

“To remain competitive, software development team leads need to stock their developer’s tool-box with advanced technology to maintain or improve productivity that helps them deliver higher quality code to everyone upstream,” said Theresa Lanowitz, founder of voke, a technology analyst firm. “As a language, C# is playing an increasing role in failure-intolerant devices, particularly in the embedded space. Coverity's expertise in static analysis will be a welcome addition to the tool-box of any C# developer.”

Unlike other static tools that simply extend existing analysis capabilities to encompass a new language, Prevent for C# is based on an entirely new analysis engine designed and optimized for Microsoft .NET-based applications. It seamlessly handles features of the C# language such as operator overloading, properties, and idioms for iteration and resource management. Prevent for C# also automatically finds third party .NET assemblies to ensure a complete analysis result, no matter how complex the application.

Coverity Prevent for C# automatically analyzes large, complex C# code bases and detects critical, must-fix defects that could lead to system failures, memory corruption or performance degradation. Because the product is the only C# static analysis tool to deliver 100% path coverage, it delivers the most comprehensive and accurate C# source code analysis. Prevent for C# requires no changes to existing build processes or code, and easily integrates into existing build processes and requires little or no additional hardware. Key capabilities of Prevent for C# include: Detect Critical Defects - Automatic detection of defects in C# source code that can cause crashes, performance degradation and incorrect program behavior

* 100% Path Coverage - Analysis of every path in C# code bases, ensuring that all possible execution branches are followed
* Low False Positive Rate - Accurate, actionable results help developers immediately begin improving the quality and security of their code
* Flexible Workflow - Defect Manager product interface allows teams to collaboratively view analysis results, triage defects, assign ownership, and provides comprehensive workflow capabilities
* Highly Scalable - Millions of lines of code can be analyzed in a matter of hours

“Coverity developed Prevent for C# in response to requests from our existing customer base and the growing use of the .NET application framework in mission-critical systems where software defects can be tremendously costly,” said Andy Chou, chief scientist and co-founder at Coverity. “Delivering new technology so that our static analysis product line covers C, C++, C# and Java is a significant milestone on our roadmap for our flagship static analysis solution.”

About Coverity

Coverity (http://www.coverity.com), the leader in improving software quality and security, is a privately held company headquartered in San Francisco. Coverity’s groundbreaking technology enables developers to control complexity in the development process by automatically finding and helping to repair critical software defects and security vulnerabilities throughout the application lifecycle. More than 450 leading companies including ARM, Phillips, RIM, Rockwell-Collins, Samsung and UBS rely on Coverity to help them ensure the delivery of superior software.

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff

Crimeware: Understanding New Attacks and Defenses
By Markus Jakobsson, Zulfikar Ramzan
Published Apr 6, 2008 by Addison-Wesley Professional. Part of the Symantec Press series.
Enter now! | Official rules | Sample chapter

Securing VoIP Networks: Threats, Vulnerabilities, and Countermeasures
By Peter Thermos, Ari Takanen
Published Aug 1, 2007 by Addison-Wesley Professional.
Enter now! | Official rules | Sample chapter

Featured Sponsor

AISO founders envisioned a Web hosting company that was environmentally friendly. While the company employed energy-efficient innovations like solar panels, its infrastructure produced unacceptable power and cooling requirements. Find out how AISO leveraged AMD technology to overcome their challenge in this case study white paper.

In this whitepaper, Scalar explores the opportunity to change the landscape with respect to mission critical databases built around Oracle. Leveraging technologies such as Linux, high-end commodity processing power and Oracle RAC technology to architect, design, build and maintain database infrastructure that delivers maximum availability, reliability and performance at a fraction of traditional cost.

On a typical day, weather.com, the Web site for The Weather Channel in Atlanta, serves up between 15 million and 20 million page views. But in September 2004, when back-to-back hurricanes ransacked Florida, the peak traffic on one day more than tripled: over 70 million page views by more than 7 million unique visitors. Read the full success story now.

More Resources