News on Monday
more>>
SharePoint Tech Report
more>>

Download Current Issue
ISSUE 3/1/2010 PDF

Need Back Issues?
DOWNLOAD HERE

Receive the print Edition?

Microsoft plans 'open' Silverlight analytics framework
Microsoft is going to announce a multipurpose analytics framework for Silverlight at MIX.
03/11/2010 09:51 AM EST

About CSS processing
Two sites that lead to a startling CSS conclusion.
03/10/2010 02:29 AM EST

Open source on Windows
Open source developers are targeting Windows with great frequency, says Microsoft.
03/09/2010 01:41 PM EST

Game Developers Conf.

3/9/2010 to 3/13/2010
San Francisco
Think Services

3/14/2010 to 3/18/2010
Seattle, Wa.
SHARE

Cloud Connect

3/15/2010 to 3/18/2010
Santa Clara, Calif.
TechWeb

Microsoft MIX10

3/15/2010 to 3/17/2010
Las Vegas
Microsoft

SharePointPro Summit & Expo

3/16/2010 to 3/19/2010
Las Vegas
Penton Media

HOME ALL STORIES LATEST NEWS COLUMNS OPINIONS EDITORIALS GUEST VIEWS SHORT TAKES DATA WATCH SPECIAL REPORTS ZEICHICK'S TAKE SD TIMES 100 EDITORS' BLOG

RSS FEEDS

FACEBOOK

TWITTER

WHITE PAPERS SPONSORED PROFILES JOB BOARD WEBINAR CENTER FREE SOFTWARE BZ RESEARCH ALMSHAREPOINT EVENTS CALENDAR PRINT/PDF EDITION PRINT/PDF BACK ISSUES

SUBSCRIBE TODAY CUSTOMER SERVICE EDITORIAL CALENDAR EDITORIAL BEATS GUEST VIEW GUIDE SD TIMES 100 GUIDE EVENTS CALENDAR ADVERTISING ARTICLE REPRINTS REPORT A BUG SITE MAP

ABOUT US BZ MEDIA NEWS BZ RESEARCH SYSMANNEWS SPTECHCON ESDC IPHONEDEVCON PRIVACY POLICY CONTACT US

Printable version

HOME >> LATEST NEWS

Most Read Latest News Blog Resources

Even with its success, .NET causes some consternation
Despite its popularity, the developer community believes that .NET isn't being fully serve...

VMware releases Tomcat-based server for Spring
SpringSource and VMware are moving their platforms closer together with tc Server for Spri...

Appcelerator dev environment targets Android, iPhone
This unified development environment compiles JavaScript into Objective-C or Java, and wil...

VersionOne extends agile project management solution
VersionOne Ultimate Edition offers a trio of components that push agile functionality out ...

dynaTrace drills deep into .NET applications
With broader support for the Microsoft stack, dynaTrace 3.2 introduces the ability to trac...

VMware releases Tomcat-based server for Spring
SpringSource and VMware are moving their platforms closer together with tc Server for Spri...

Microsoft plans 'open' Silverlight analytics framework
Microsoft is going to announce a multipurpose analytics framework for Silverlight at MIX.

About CSS processing
Two sites that lead to a startling CSS conclusion.

Open source on Windows
Open source developers are targeting Windows with great frequency, says Microsoft.

Overcoming Development Challenges with Open Source Open source software can help you with your application development challenges. It doesn’t...

Accelerate Services and the Cloud Business units, functional groups, and different divisions of companies across industries...

Enterprise Mashup Platforms for Today’s Increasingly Complex and Real-Time Context Enterprise Mashups offer your company a new way to connect data from inside and outside yo...

Technorati

Digg

Slashdot

Facebook

Friendfeed

Twitter

del.icio.us

Ounce Teams With Maven

New version of analysis engine integrates with Apache’s build platform

By Jeff Feinman

January 3, 2008 —

Ounce Labs yesterday released the latest version of its flagship security analysis engine, with new build automation capabilities that include support for the Apache Software Foundation’s Maven build platform.

Ounce 5.0.4 comes with two new components: the Ounce-Maven plug-in and the Ounce Automation Server.

The Ounce-Maven plug-in allows Ounce to integrate with the Maven build environment by enabling the generation of Ounce projects and applications that are based on Maven project files.

Ounce scans can also be carried out on Maven projects with the option to publish and save results, and a report can be displayed with the results of the scan.

The plug-in operates independently of other Ounce components when creating application and project files, but it uses the Ounce Automation Server for scanning and reporting.

The Ounce Automation Server allows the managed running of scans and publishing the results in addition to generating reports. It can be configured to act as an Ounce user and, when in use, have the same permissions of that user. It comes with a free-standing CLI, the Ounce Automation Server Command Line client. According to Ounce officials, clients of the Ounce Automation Server are tied to a particular host, reducing the likelihood of confusion.

The source code for the Ounce-Maven plug-in will be hosted at the Codehaus open source project repository.

Share this link: http://www.sdtimes.com/link/31470

IBM acquires security testing company Ounce Labs Ounce's source code analysis software is expected to extend IBM’s application security and compliance products.

Integration Watch: Maven goes commercial Sonatype, Jason van Zyl's company, has expanded its array of software and support products. The result is a more comprehensive set of tools for Java developers and lowers the usual risks involves with free and open-source software.

Ounce brings in former Quova exec as CEO Gary Jackson replaces Hugh Scandrett as Ounce's CEO. Jackson was the COO at Quova, where he created its international sales and customer service teams, and also held executive positions at other companies.

Add comment

Name*
Email*
Country

Comment
Preview

Please hold here to Drag the window

Close [x]

Subscribe today and you'll receive 24 free issues of SD Times!

Dear Software Professional,

I’d like to invite you to subscribe to SD Times, the newspaper of the software development industry. The newspaper is free, and it will only take a moment to subscribe!

SD Times covers the fast-paced world of software and application development. The twice-monthly newspaper helps software architects, project leaders, analysts and development managers make the proper decisions about products, methodologies and practices that can affect their development teams and efforts.

Each year, we offer only a limited number of complimentary subscriptions to software development professionals!

It only takes moment to sign up. Don't delay, subscribe today!

Sincerely,

David Lyman
Publisher
SD Times

Ounce Teams With Maven

New version of analysis engine integrates with Apache’s build platform

By Jeff Feinman

Related Articles

Add comment