editor's blog
Subscribe Now

Another Tool in the Cloud

We saw recently that Protecode added an online capability for a quick audit of software on a one-off basis. It involves upload by a user, automated analysis by Protecode-side tools, and then a manual review at Protecode just to make sure everything looks right. The tools themselves are hidden from the user.

They’ve now gone one step further and offered their tools outright through the cloud. To understand their motivation, it helps to review what their tools do. They analyze software – and we’re talking potentially huge projects involving many thousands of files – to establish both the source of any code that came from outside the company and the rights and obligations associated with the licenses for that code. It becomes a kind of software pedigree or provenance.

Some companies use this on an ongoing basis for a wide range of development projects; these tend to be large companies, and they install the tools the old-fashioned way. But some smaller companies or even investors want to check out code ad hoc when some sort of business deal is underway; this becomes part of the due diligence. The QuickAudit is one way to do that.

But in between, some companies may do analysis a couple times a year, in conjunction with major releases, for example. They don’t need the tool running all the time, but they have bigger projects than are allowed with the QuickAudit capability.

So these guys are the targets of the cloud implementation. There’s actually a second group they’re targeting as well: developers that have grown up doing all kinds of things in the cloud, and who therefore aren’t as concerned about it.

Subscribers get a dedicated machine at RackSpace as long as they have an active account. Protecode looked into providing “suspend” and “resume” capabilities, but they decided it wasn’t worth the effort. Unlike the quick audit offering, the cloud tool is full-featured (minus some features that were nonsensical in the cloud).

They can also install the cloud version on a private cloud, presumably with suitable inducements…

You can find more in their release.

Leave a Reply

featured blogs
Jul 3, 2020
[From the last episode: We looked at CNNs for vision as well as other neural networks for other applications.] We'€™re going to take a quick detour into math today. For those of you that have done advanced math, this may be a review, or it might even seem to be talking down...
Jul 2, 2020
Using the bitwise operators in general, and employing them to perform masking operations in particular, can be extremely efficacious....
Jul 2, 2020
In June, we continued to upgrade several key pieces of content across the website, including more interactive product explorers on several pages and a homepage refresh. We also made a significant update to our product pages which allows logged-in users to see customer-specifi...

Featured Video

Product Update: Advances in DesignWare Die-to-Die PHY IP

Sponsored by Synopsys

Hear the latest about Synopsys' DesignWare Die-to-Die PHY IP for SerDes-based 112G USR/XSR and parallel-based HBI interfaces. The IP, available in advanced FinFET processes, addresses the power, bandwidth, and latency requirements of high-performance computing SoCs targeting hyperscale data center, AI, and networking applications.

Click here for more information about DesignWare Die-to-Die PHY IP Solutions

Featured Paper

Cryptography: A Closer Look at the Algorithms

Sponsored by Maxim Integrated

Get more details about how cryptographic algorithms are implemented and how an asymmetric key algorithm can be used to exchange a shared private key.

Click here to download the whitepaper

Featured Chalk Talk

Microchip SAM11L KPH

Sponsored by Mouser Electronics and Microchip

Adding connectivity to your embedded design opens up a whole new realm of security challenges. Inviting your device to the IoT requires careful attention to building a secure foundation. In this episode of Chalk Talk, Amelia Dalton chats with Anand Rangarajan from Microchip about the SAML11-KPH MCU and how it can help you develop your application without worrying about security.

Click here for more information about Microchip Technology SAM L10/L11 ARM® Cortex®-M23 MCUs