LOGIN | REGISTER NOW | SUBSCRIBE
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 
Download Current Issue
ISSUE 3/15/2010 PDF

Need Back Issues?
DOWNLOAD HERE

Receive the print Edition?


 
blogs tab
Microsoft lifts the hood on IE9
Microsoft is previewing IE9.
03/16/2010 01:10 PM EST

People Power enters the green technology market
People Power launches SuRF Developer's Kit for developers looking to get into green technology.
03/16/2010 11:51 AM EST

Windows Phone 7 will not support HTML 5
Windows Phone 7 will not support HTML 5.
03/15/2010 05:51 PM EST

 

Events calendar tab
SHARE
3/14/2010 to 3/18/2010
Seattle, Wa.
SHARE

Cloud Connect
3/15/2010 to 3/18/2010
Santa Clara, Calif.
TechWeb

SharePointPro Summit & Expo
3/16/2010 to 3/19/2010
Las Vegas
Penton Media

TheServerSide Java Symposium
3/17/2010 to 3/19/2010
Las Vegas
TechTarget

EclipseCon
3/22/2010 to 3/25/2010
Santa Clara, Calif.
The Eclipse Foundation


 
print Printable version 
Most Read Latest News Blog Resources
Mono brings .NET to Android
At Microsoft MIX, Mono will unveil the ability to port .NET applications to the Android op...

Even with its success, .NET causes some consternation
Despite its popularity, the developer community believes that .NET isn't being fully serve...

Guest View: The half-agile path leads nowhere
While businesses are taking on agile and adopting its practices, an incomplete implementat...

Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter

Coveros puts continuous integration pieces together


By Jeff Feinman
September 3, 2009 — 
An application security consulting company thinks there isn’t enough collaboration among open-source builders, so it has rolled out a secure continuous integrator.

Coveros focuses on fixing security problems and helping companies with software quality and agile development. The company today introduced SecureCI, a free product that integrates build management and source code control with open-source application security technologies in order to test Web applications for security vulnerabilities.

“What we found in doing agile development is that there’s a lot of open-source products out there for building and testing your apps, and a lot of people that are using open source are having to integrate all that stuff together themselves,” said Jeffrey Payne, CEO and founder of Coveros.

“Almost everywhere we go, we end up helping them pull all their stuff together. Our thought was, why don’t we take the best-of-breed open-source products that are out there and integrate them so they work out of the box as one solution?”

Payne said SecureCI’s ability to integrate builders and source code controllers for free is what makes the product unique from other build managers. Additionally, Coveros integrates Sonar, an open-source dashboard for analyzing code quality. Sonar uses multiple open-source static code analyzers and gathers the metrics.

“Now you’ve got a package that gathers results from automated tests you set up using Selenium or JUnit, or any of the application security tests you run using Google’s Ratproxy, PMD or FindBugs,” Payne said.

In Coveros’ mind, there are three places in continuous integration where software needs to integrate: build management, bug tracking and process metrics. With build processes, a developer needs to be able to work with Apache Ant or Maven and automatically run regression and unit tests, Payne said. Developers also need to associate defects with the code or requirements used to create the code. Finally, integration is needed to put together all analysis results.

“Our goal is to integrate at all three of those levels, and that way no one has to do that when using a continuous integration suite,” Payne said. “What we’re trying to do is provide open-source integrated solutions that help support the idea of building your software securely.”

Payne added that he was “scratching his head” about what he considers a lack of organizations that integrate open-source application security testers, such as OWASP’s WebScarab and Paros’ Proxy, into continuous integration. SecureCI can implement security best practices into the build management phase of the software development life cycle.


Related Search Term(s): Coveros, open source, security


Share this link: http://www.sdtimes.com/link/33740
 

Comments

09/15/2009 12:58:46 PM EST

Interesting but hardly new. I can remember off the top of my head CI Factory and Buildix

United StatesZuz


Add comment


Name*
Email*  
Country     


  • Comment
  • Preview
Loading