Top Banner
BlueStripe Software CA Technologies Crank Software Honeywell Siemens Sypris Electronics Viveris CASE STUDY Viveris Improves Security Using Static Analysis Viveris has built a name for itself in the embedded industry by helping its customers deliver high-quality software to drive complex products in a variety of different markets (aerospace and defense, transportation, telecom, medical, but also aeronautics). Viveris can augment a customers software development team, or take over the entire development cycle, including hardware if needed. In the last years, the customers’ focus has shifted from time-to-market and quality to also include security. Viveris has mastered security and offers every- thing from secure boot to attestation to authentication and encryption. How- ever, security is only as strong as it’s weakest link, which is often the code, the application layer resting on top of a secure foundation. Developing secure code requires focus and experience and additional effort, tool automation can greatly help in this aspect. Viveris uses GrammaTech CodeSonar to dramatically improve the efficiency of software developers working on customers projects, while delivering higher security from the early start of the Software Development LifeCycle. CodeSonar helps Viveris by: • Finding problems early in the development cycle, which makes it easier to fix them and through that increases developer efficiency • Helping developers write better code through warnings right when the code is submitted to CM systems, this benefits both junior and senior engineers • Finding security flaws having to do with common programming problems, data taint, or insider threat violations Following coding, safety and security standards Viveris developers often are brought in to help late state software projects. Running CodeSonar on the source code that is already available helps Viveris find defects, but also allows the Viveris engineers to quickly master the source code and become productive through CodeSonar’s elaborate code navigation and visualization capabilities. Viveris uses CodeSonar in their own development workflows, but also recommends it as a tool for their customers after the engagement is completed. CASE STUDY OTHER CUSTOMERS IN THE EMBEDDED INDUSTRY INCLUDE: © 2018 GrammaTech, Inc. All rights reserved. CodeSonar is a registered trademark of GrammaTech, Inc. We recommend CodeSonar during audits and trainings we regularly do with our customers. - Pierre Guelminger Manager, Viveris For more information: www.grammatech.com Email: [email protected] GrammaTech Headquarters: 531 Esty Street Ithaca, NY 14850 U.S. sales: 888-695-2668 International sales: +1-607-273-7340 Email: [email protected]
1

Viveris Improves Security Using Static Analysis · 2018-01-15 · Viveris Improves Security Using Static Analysis Viveris has built a name for itself in the embedded industry by helping

Jun 22, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Viveris Improves Security Using Static Analysis · 2018-01-15 · Viveris Improves Security Using Static Analysis Viveris has built a name for itself in the embedded industry by helping

BlueStripe Software

CA Technologies

Crank Software

Honeywell

Siemens

Sypris Electronics

Viveris CASE STUDY

Viveris Improves Security Using Static Analysis

Viveris has built a name for itself in the embedded industry by helping its customers deliver high-quality software to drive complex products in a variety of different markets (aerospace and defense, transportation, telecom, medical, but also aeronautics). Viveris can augment a customers software development team, or take over the entire development cycle, including hardware if needed.

In the last years, the customers’ focus has shifted from time-to-market and quality to also include security. Viveris has mastered security and offers every-thing from secure boot to attestation to authentication and encryption. How-ever, security is only as strong as it’s weakest link, which is often the code, the application layer resting on top of a secure foundation.

Developing secure code requires focus

and experience and additional effort, tool

automation can greatly help in this

aspect. Viveris uses GrammaTech

CodeSonar to dramatically improve the

ef�ciency of software developers working

on customers projects, while delivering

higher security from the early start of the

Software Development LifeCycle.

CodeSonar helps Viveris by:

• Finding problems early in the

development cycle, which makes it easier

to �x them and through that increases

developer ef�ciency

• Helping developers write better code

through warnings right when the code is

submitted to CM systems, this bene�ts

both junior and senior engineers

• Finding security �aws having to do with

common programming problems, data

taint, or insider threat violations

Following coding, safety and security

standards

Viveris developers often are brought in to

help late state software projects. Running

CodeSonar on the source code that is

already available helps Viveris �nd

defects, but also allows the Viveris

engineers to quickly master the source

code and become productive through

CodeSonar’s elaborate code navigation

and visualization capabilities.

Viveris uses CodeSonar in their own

development work�ows, but also

recommends it as a tool for their customers

after the engagement is completed.

CASESTUDY

OTHER CUSTOMERSIN THE EMBEDDED

INDUSTRY INCLUDE:

© 2018 GrammaTech, Inc. All rights reserved. CodeSonar is a registered trademark of GrammaTech, Inc.

”“We recommend

CodeSonar during audits and trainings we regularly do with our customers.

- Pierre GuelmingerManager, Viveris

For more information:www.grammatech.comEmail: [email protected]

GrammaTech Headquarters:531 Esty StreetIthaca, NY 14850

U.S. sales: 888-695-2668

International sales: +1-607-273-7340

Email: [email protected]