HP and IBM Shake Up Security Market


IBM’s purchase of Watchfire was followed by HP’s acquisition of SPI Dynamics in security arms race


Email    print   
December 26, 2007 —  Much like the movie industry, two summer blockbusters dominated the year’s software security market. Hewlett-Packard waited barely a month after IBM had announced its intent to acquire Watchfire in June, to put together its own box office hit by purchasing SPI Dynamics. The two security plays demonstrate the commitment of the major software companies to instilling software development with security.

IBM’s purchase of Watchfire brought the latter company’s application security tool under the IBM Rational software brand, and IBM has since integrated its Rational software quality management tools with Watchfire’s security and compliance testing services. IBM officials noted that Watchfire also complements the company’s Tivoli access, identity and compliance management software offerings, as well as the work of IBM Internet Security Systems. Watchfire does so by extending security and compliance testing as an integrated element of the application development life cycle.

HP’s acquisition of SPI Dynamics was completed Aug. 1, and the entire line of products was swept under HP’s umbrella, becoming the Application Security Center. SPI Dynamics’ Atlanta office remains for the moment, along with most of the company’s staff and services, including the SPI Labs security research and development facility.

Redmond Wasn’t Buying
Perhaps the most intriguing acquisition was the one that didn’t happen, as Microsoft stood pat while HP and IBM made their big plays into the space. Some experts claim that Microsoft can use a top-quality security solution to go along with Visual Studio Team System. Some argue that rather than creating its own remedy for the lack of security in Visual Studio, the best way for the company to cure this weakness in its portfolio is through acquiring an established security player.

With the dust settled after the completion of the two major acquisitions of 2007, some companies that still remain on the application security landscape include Fortify Software, Klocwork and Ounce Labs. With Microsoft, Borland Software, Oracle and Sun Microsystems among the major players that still lack integrated security within their IDEs, it will be interesting to see if other acquisitions come to pass.

Though IBM and HP stole the show this year with regard to application security, more emphasis was also put on the amount of protection involved in emerging technologies.

The OpenAJAX Alliance announced OpenAJAX Hub version 1.1, a small JavaScript library that allows multiple AJAX toolkits to work together on the same page. One of the key problems with keeping mashups secure, according to David Boloker, CTO of emerging technologies at IBM and a founder of the alliance, is that they come from multiple domains. OpenAJAX Hub 1.1 tries to remedy this, he said, by isolating mashups into secure sandboxes, and enabling client/server messaging.





Share this link: http://sdt.bz/31459
 
Most Read Latest News Blog Resources

Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
HP builds up its Security-as-a-Service
Fortify On-Demand is designed to protect applications running in cloud environments Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
02/09/2012 02:16 PM EST

Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
02/07/2012 11:57 AM EST

RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
02/04/2012 01:57 PM EST

GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

 
Events calendar tab
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

2/26/2012 to 2/29/2012
San Francisco
BZ Media

2/27/2012 to 3/2/2012
San Francisco
RSA

3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

3/5/2012 to 3/9/2012
San Francisco
TechWeb