industry news
Subscribe Now

Cybersecurity and Service at Forefront of CodeSonar 4.5 Static Analysis Release

Rapid development environment, new secure coding checkers to thwart cybercrime, improved floating point support, and Software Assurance Services come to CodeSonar 4.5 today.

Ithaca, NY (USA) — December 4, 2017 – Software teams looking to improve code quality and security have an updated tool for their toolbox. GrammaTech, a leading provider of software assurance tools and cybersecurity solutions, today announced immediate availability of CodeSonar 4.5, bringing a comprehensive set of enhancements, as well as static-analysis-as-a-service, to the advanced tool.

In addition to the technical updates of the tool, software teams can now reap the benefits of higher code quality even faster with Software Assurance Services, GrammaTech’s offering of static analysis as an on-premises service. GrammaTech’s senior consultants will manage the static analysis workflows and processes, allowing customers to focus on resolving the defects reported even more efficiently.

CodeSonar 4.5 brings a host of new features to software teams seeking to improve their secure software development lifecycle (SDLC). C++ and Python APIs have been introduced allowing software teams to rapidly build domain specific checks to express their design invariants for CodeSonar to evaluate. An API is also available to quickly add support for new compilers. Additionally, improved floating point support allows CodeSonar to find more defects in code paths that rely on decisions involving floating point computations.

New checkers have been made available in CodeSonar 4.5 to detect malicious code that has purposely or inadvertently been added into code.  These checkers help combat the rise of cybercrime within companies. According to an IBM study, 32% of attackers are insiders and 24% are “inadvertent actors” (e.g. people making mistakes that lead to a system breach or incorrect behavior). The new checkers highlight suspicious code before it can pose a problem in deployed systems.

“This release underlines GrammaTech’s commitment to helping our customers improve their software assurance processes,” says Mark Hermeling at GrammaTech. “CodeSonar growth rate is double the market growth, which shows our customers’ appreciation for our continued efforts and innovation.”

The update is available as a free upgrade to all licensed customers under active support and maintenance contracts. A 30-day free trial of CodeSonar 4.5 is also available at go.grammatech.com.

About GrammaTech:

GrammaTech’s advanced static analysis tools are used by software developers worldwide, spanning a myriad of embedded software industries including avionics, government, medical, military, industrial control, and other applications where reliability and security are paramount. Originally developed within Cornell University, GrammaTech is now a leading research center for software security and a commercial vendor of software-assurance tools and advanced cyber-security solutions. With both static and dynamic analysis tools that analyze source code as well as binary executables, GrammaTech continues to advance the science of superior software analysis, providing technology for developers to produce safer software. For more information, visit www.grammatech.com or follow us on LinkedIn.

Leave a Reply

featured blogs
Feb 23, 2018
The IEEE-SA has a policy of keeping standards active by making sure they get a cycle of updates every 10 years. Including Verilog, SystemVerilog has been going on a cycle of updates every 5±1 years since 1995. I wrote here about the updates to 1800-2009 and 1800-2012, and no...
Feb 23, 2018
What is a software GPS, what does it have to do with Tensilica DSP IP, and why would anyone care? To answer that, let's start with a quiz from the transportation industry. How many shipping containers are currently in transit around the world? It turns out that no one kn...
Feb 22, 2018
We’ve spent a good chunk of the last year building a new on-site search experience for Samtec.com. This update continues that trend with our newly released competitor cross reference search addition. Using this feature, you can access competitor cross reference data for...
Jan 19, 2018
Artificial intelligence (AI) is reshaping the way the world works, opening up countless opportunities in commercial and industrial systems. Applications span diverse markets such as autonomous driving, medical diagnostics, home appliances, industrial automation, adaptive webs...