As autonomous systems, connected devices, and AI technologies continue to come online, engineering teams are finding it more difficult to rely on traditional development methods. As the sophistication ...

I had an interesting conversation recently about the after-effects of Heartbleed and the challenges facing static analysis with Barton Miller, the chief scientist of the Software Assurance Marketplace ...

Over the years, medical devices have become increasingly dependent on software. They have evolved from the use of a metronome circuit for early cardiac pacemakers to functions that include ...

Static analysis works on source code and tries to identify errors based on what it can tell about the program. For example, it can highlight “dead code” that will never execute. And sometimes it can ...

Every enterprise struggles to combat some ingrained partialities but, after 23 years in the QA industry, I’ve found that there’s a particular pattern of bias against static testing. It’s no industry ...

The high cost of finding and patching application flaws is well known. Wouldn’t it be cheaper to write secure code in the first place? More on code analysis tools and software security Source code ...