LOGIN | REGISTER NOW | SUBSCRIBE
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 
Download Current Issue
ISSUE 3/15/2010 PDF

Need Back Issues?
DOWNLOAD HERE

Receive the print Edition?


 
blogs tab
ASP.NET MVC 2 Ships
ASP.NET MVC 2 has shipped.
03/12/2010 10:26 AM EST

Microsoft plans 'open' Silverlight analytics framework
Microsoft is going to announce a multipurpose analytics framework for Silverlight at MIX.
03/11/2010 09:51 AM EST

About CSS processing
Two sites that lead to a startling CSS conclusion.
03/10/2010 02:29 AM EST

 

Events calendar tab
SHARE
3/14/2010 to 3/18/2010
Seattle, Wa.
SHARE

Cloud Connect
3/15/2010 to 3/18/2010
Santa Clara, Calif.
TechWeb

Microsoft MIX10
3/15/2010 to 3/17/2010
Las Vegas
Microsoft

SharePointPro Summit & Expo
3/16/2010 to 3/19/2010
Las Vegas
Penton Media

TheServerSide Java Symposium
3/17/2010 to 3/19/2010
Las Vegas
TechTarget


 
print Printable version 
Most Read Latest News Blog Resources
Even with its success, .NET causes some consternation
Despite its popularity, the developer community believes that .NET isn't being fully serve...

Appcelerator dev environment targets Android, iPhone
This unified development environment compiles JavaScript into Objective-C or Java, and wil...

VMware releases Tomcat-based server for Spring
SpringSource and VMware are moving their platforms closer together with tc Server for Spri...

Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter

LDRA adds CERT C standard to test tools suite


By David Rubinstein
October 27, 2008 — 
Test tool provider LDRA is now offering its TBrun unit test tool as a standalone product in an attempt to get more developers writing safety-critical applications for unit testing earlier in the development process.

The company also announced that its entire suite of test tools now supports the security-based CERT C Secure Coding Standard. The announcements were made today at the Embedded Systems Conference in Boston.

The company cited research that it said shows unit testing not being done early or often enough, preventing developers from catching errors and fixing them at a time when the cost is relatively low.

TBrun can do both unit and regression testing, and with a plug-in called TBeXtreme, can enable the creation of test cases and automate test process integration. TBrun can run on Linux, Unix and Windows, and it sells for US$10,000 per seat. The plug-in costs $2,000.

CERT C is a standard for secure coding created by the Carnegie Mellon Software Engineering Institute (CMSEI); version 1.0 was unveiled today at the SD Best Practices conference, also in Boston.

The CERT C standard, according to CMSEI, provides rules and recommendations for secure coding in the C programming language, and is designed to be operating system and platform neutral.

LDRA's TBsecure programming checker plugs in to TBvision, a tool that shows developers how software is performing against known security vulnerabilities, enabling development managers to see how the code measures up against established security metrics. Among the things it addresses are dynamic memory allocation, which can lead to vulnerabilities such as buffer overflows, and other coding practices such as out-of-range array indices and null pointer dereferencing. TBsecure costs $2,000.

LDRA positions its test suite as unique, as it has the ability to send the results of tests back to a requirements tool, so not only are code defects being identified earlier, but deviations from the requirements can also be spotted earlier in the development process, according to John Greenland, vice president of business development for LDRA.

"We see a focus on unit tests, or systems tests, or static analysis—compliance and runtime analysis. No one is tying it back to requirements," Greenland said. "With runtime defect analysis, they're trying to prove a program is error-free, not that it does what it was spec'd out to do. We're trying to prove the program is doing what it's expected to do."


Related Search Term(s): CERT C, security, testing, CMSEI, LDRA


Share this link: http://www.sdtimes.com/link/33007
 

Add comment


Name*
Email*  
Country     


  • Comment
  • Preview
Loading