from the previous post, it would be nice if we could get them to agree on the Security Rung, maybe NiST has a clue?
Can government-funded open source make Coverity obsolete?
Some government-funded open source offers an alternative bug-fixing approach to that used by Coverity, whom we wrote about yesterday.
The NIST, working with researchers at UT-Arlington, plan to release open source code for what they call automated “combinatorial” testing.
While Coverity’s software tests lines of code for common mistakes, like failing to close quotes or basic processes, the new code tests a variety of error states in combination. (A release on this is at Science Daily.)
Recent Comments