Synopsys, Inc. today announced it will showcase its Software Integrity Platform, a comprehensive suite of software security testing solutions for software signoff, at the RSA Conference in San Francisco (February 29-March 4). Through a combination of best-in-class automated testing and analysis tools, Synopsys' Software Integrity Platform enables organizations to reduce risk, cost, and time to market by rapidly detecting and fixing critical security vulnerabilities throughout the software development lifecycle and supply chain.
The Software Integrity Platform supports robust application security testing programs for software ranging from enterprise web applications to embedded software and IoT devices. The platform facilitates 'software signoff', an emerging concept in software development and testing that helps provide elevated confidence in the quality and security of software by introducing testing gates at critical progression points throughout the software development lifecycle and software supply chain.
Synopsys, a global leader in electronic design automation and semiconductor IP, entered the software security market in early 2014 with the acquisition of Coverity, Inc., a pioneer in static application security testing solutions. Since then it has built its leadership in the security space with other security acquisitions including Codenomicon Ltd., Seeker by Quotium, Protecode Inc., and the Goanna product.
"Our Software Integrity Platform is built on best-of-breed solutions that are already being used by 15 of the top 20 global software companies to develop better, more secure software," said Andreas Kuehlmann, senior vice president and general manager of Synopsys' Software Integrity Group. "We're building on decades of experience and investing our resources to enhance and unify these products under a seamless, holistic platform to deliver true software signoff. By doing so, we're enabling our customers to address the challenges of developing secure software in the face of mounting cyber threats and under constricting go-to-market timetables."
Combining the technologies and expertise of innovative security vendors such as Codenomicon, the firm that discovered Heartbleed, and Coverity, a pioneer in static analysis, Synopsys provides one of the broadest and most powerful toolsets for software security testing in the market. The Software Integrity Platform includes:
Coverity® solution – an industry leading static analysis solution for early detection of critical vulnerabilities in source code.
Protecode™ solution – the industry's first software composition analysis solution leveraging source code and binary analysis to detect and manage known vulnerabilities and other risks introduced by open source and other third-party code in the software supply chain.
Defensics® solution – an advanced network protocol fuzz testing solution for discovering unknown vulnerabilities and preempting zero-day attacks.
Seeker® solution – a pioneering Interactive Application Security Testing (IAST) solution for detecting exploitable vulnerabilities in web applications with zero false positives.
Test Advisor™ solution – an automated test optimization solution for assessing the impact of code changes and prioritizing testing efforts.
For more information, please visit the Synopsys RSA Conference event page.
