- Cool Yule Tools: 2008 Holiday Gift Guide
- 10 kitchen gadgets for the geek gourmet
- Google admits to violating iPhone development terms
- Smartphone smackdown: Storm vs. iPhone
- Google layoffs: 10,000 jobs being cut
IBM on Monday introduced new source-code-scanning software designed to spot security bugs as programs are being written.
The software was developed as an enhancement to the Rational AppScan product line that IBM picked up last year in its purchase of security software vendor Watchfire.
Watchfire's AppScan software could find bugs in applications once they were up and running, but using technology from its research labs, IBM has now enhanced the product so it can spot flaws throughout the software development process. "We're taking that technology and we're building new releases of it, which will allow customers to take a more preemptive approach," said Scott Hebner, vice president of market management with IBM's Rational Software group.
By fixing bugs earlier, companies can save money. A flaw that may cost just US$25 to fix as the program is being written can cost perhaps $16,000 to fix after the software has gone live, Hebner said.
With these new bug-finding tools IBM is now competing with source-code security analysis vendors such as Fortify and Ounce Labs, said Chenxi Wang, an analyst with Forrester Research.
By integrating source-code analysis tools with its Rational Integrated Development Environment (IDE), IBM hopes to make it easier for developers to use these products. In the past, developers have steered clear of security tools because they tended to be inaccurate or were not rolled into their IDEs, Hebner said.
IBM's new AppScan products include a Developer Edition, Build Edition and Tester Server product, all available Monday. Pricing starts at $2,650 per developer license.
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com | The Industry Standard | IDG List Services | IDG TechNetwork |
 The Leader in Network Knowledge© 1994-2008 Network World, Inc. All rights reserved. |
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment