IBM acquires security testing company Ounce Labs

By David Rubinstein

July 28, 2009 — IBM this morning announced it has acquired Ounce Labs, a privately held maker of source code analysis software. Terms of the transaction were not disclosed.

The acquisition is the second in the software security space for IBM; in 2007, the company acquired Watchfire—makers of the AppScan security and compliance testing software—to bolster its Governance and Risk Management offerings. Ounce Labs’ technology will be rolled into the IBM Rational AppScan tools.

Ounce Labs’ solution scans source code to find potential security vulnerabilities and areas of non-compliance during development, when the costs of correcting these issues are lower. “Secure applications are vital to information integrity and continuity in government and business,” said Daniel Sabbah, general manager of IBM Rational software, in a written statement announcing the acquisition.

“The acquisition of Ounce Labs allows IBM to provide customers an end-to-end application security testing solution for managing security and compliance across all stages of the software delivery process.”

IBM also announced today that it will acquire SPSS, a company that makes predictive analysis software for forecasting trends and anticipating change. With this deal, IBM is announcing Smart Analytics System, designed to help companies use hard data to make more intelligent business decisions more quickly. IBM said it’s the 27th acquisition it has made to support its Information on Demand strategy.

Related Search Term(s): IBM, Ounce, security, SPSS

Share this link: http://sdt.bz/33643

Technorati

Digg

Slashdot

Facebook

Friendfeed

Twitter

del.icio.us

Application security, IBM style Jack Danahy, founder of Ounce Labs, discusses acquisitions by IBM and what he sees in the security space

Cigital Develops Ready-to-Use Tools for Securing the Smart Grid Cigital Inc. announced the release of the Guide to Developing a Cyber Security and Risk Mitigation Plan.

IBM adds analysis techniques to AppScan security software String and hybrid analysis are designed to address vulnerabilities at earliest stage of development