Fortify Gets Multilingual
New version of SCA works with more languages, adds customization
November 1, 2007 —
Fortify Software has added customization and collaboration capabilities to the latest version of Fortify Source Code Analysis.
Fortify SCA 5.0, expected to be released on Oct. 22, comes with the ability to modify the way in which analysis results are filtered, prioritized and allocated. It also offers developers the opportunity to scan code of a larger number of languages. The tool now has the ability to either load code scan results into existing tools, or upload them into an HTML interface and a Web interface. Through the second method, groups of people can view and audit those results.
“You will now have an option of either using multiple tools to do audits individually, or can use the HTML interface to do it collaboratively,” said Barmak Meftah, vice president of products and services for Fortify.
Fortify SCA now supports PHP; Meftah noted the company has seen a trend of developers writing more Web applications with PHP. Fortify SCA will have full language support for JavaScript, supporting the increasing use of AJAX. There will also be the ability to write with Microsoft Visual Basic and Active Server Pages (ASP).
“We didn’t support that up until now…because we were assuming that the conversion between classic ASP and classic Visual Basic would happen to .NET much more expeditiously,” said Meftah. “Although we see a big adoption trend with .NET already, there is a huge installed base on ASP and Visual Basic out there, which I don’t think is going to change as fast as we thought it would.”
Meftah also said that COBOL support would be in an upcoming preview release. Meftah noted the frequent use of COBOL in financial services and in the federal government. To this day, COBOL still runs some of the most mission-critical pieces of those organizations, he said.
Another feature of Fortify SCA 5.0 is enhanced extensibility and customization. Meftah said the tool has two key components, the engine component containing analysis algorithms, and Fortify rules, for secure coding. End users have the ability to write their own sets of rules. The interface around the Fortify rules, which are updated every three months, has been enhanced through enhanced integrations with Fortify Audit Workbench, which combines Fortify’s source code analysis capabilities and a user interface, allowing developers to prioritize results.
Other new features in Fortify SCA include a rules wizard, unlimited multidimensional taint propagation and an API scan view. Development teams can also publish the results of a source code scan to Fortify’s Team Server for review.
Share this link: http://sdt.bz/31319
Most Read Latest News Blog Resources
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Zeichick’s Take: Radio moves from analog waveforms to digital packets
Streaming radio highlights the need for streaming applications to be designed to take up as little bandwidth as possible
|
|
Appcelerator Acquires Cocoafish to Add Instant Mobile Cloud Capabilities to its Industry Leading Titanium Platform
Appcelerator Offers Messaging, Social, Location and Storage Mobile Cloud Services to All Mobile App Publishers
|
|
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
|
|
Xceed releases UX-focused suite for Microsoft’s WPF
"Blendables" helps match user experiences to developer visions
|
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
|
|
Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
|
|
RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
|
|
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
|
The Hidden Costs of Software Licensing
Moving beyond paper-based software licensing to more flexible, software-based licensing is a business decision. There is a growing trend tow...
|
|
Case Study: You May Need a Development Mechanic
As a contractor for a major financial player in Germany, SOBEGE, a German-based consultancy specializing in embedded IT and web services, wa...
|
|
Ensuring Software Quality at a Major International Bank
One of the world’s leading international banks has adopted AgitarOne technology for delivering generated unit tests for their Java software...
|
|
Load Testing Adobe Flex Applications
Adobe Flex applications may be different from applications you’ve worked with before. For classic HTML web applications, the server does all...
|