editor's blog
Subscribe Now

Protecode Takes on Security

Protecode issued a new release of their tools the other day, and in this release they appear to have stepped beyond a strict focus on licensing: now they’re looking at security issues as well.

There are other companies with thorough analysis programs that focus on security and safety, so I wondered whether Protecode was either trying to duplicate those tools and methods or perhaps was partnering with one of them.

Turns out it’s neither of those two choices. Instead, they extend their license-checking methodology to security. The way they work for license review is to scan the code and match code snippets (or signatures of snippets) against a database of known code, from which they can find the license characteristics of that code. Now they do the same thing with respect to databases containing known security vulnerabilities.

It’s not clear that this makes more thorough analysis unnecessary, and, as far as I can tell, there’s no certification of any kind that comes out of it. It has something of an opportunistic, “While you’re checking, could you also look at security?” feel.

More details in their release

Leave a Reply

featured blogs
May 18, 2018
https://youtu.be/O1r7cqyVm90 I was on China24 on CGTNAmerica earlier this week, being interviewed about the Chinese Semiconductor Industry. www.breakfastbytes.com Sign up for Sunday Brunch, the weekly Breakfast Bytes email....
May 17, 2018
Just about everybody wishes they had more time to pursue a hobby or a side project.  Some aspire to be painters or furniture makers.  Others like to rebuild cars.  Even others enjoy electronics in any form. The Maker Movement attracts and caters to tinkerers, hobbyists, st...