Klocwork debuts on-the-fly source code analysis - Embedded.com

Klocwork debuts on-the-fly source code analysis


Burlington, Ma. – Klocwork Inc. has just launched its newest code analyzer release, Insight 9.5, which it claims is the first to offer on-the-fly static analysis.

According to Mike Laginski, Chief Executive Officer, Klocwork, this latest release of the company's flagship product changes the entire usage model for source code analysis and removes the remaining barriers to developer adoption of this technology.

“For the first time, C/C++ developers can access sophisticated source code analysis using the simple usability model of a spell checker,” he said. “What we've seen and heard from our customers is a continued desire to get away from inefficient ‘batch processing’ deployments where all their code analysis is centralized.”

He said this traditional approach is an inefficient and costly approach to deploying this technology, pointing out that source code analysis is a developer tool not an audit tool and should reflect a usability model that allows developers to make early security vulnerability and defect detection a reality.

Similar to the spell check feature in popular word processors, he said, Klocwork Insight instantly underlines defects as developers are writing their code.

In the background, sophisticated syntax and dataflow analysis, build comprehension, and incremental analysis are continuously running to ensure thorough and highly accurate identification of security vulnerabilities and critical defects.

In this iteration of the tool, such on-the-fly analysis is combined with on-the-fly reporting. With an all new HTML 5 implementation, a new web reporting tool allows development teams to answer complex questions about the security, reliability and maintainability of their code base quickly and easily. A redesigned report creator and all new report templates use simple drag & drop pivot chart capabilities to allow users to design reports that meet their organization's specific needs.

Insight 9.5 offers cross-project impact analysis and reporting which immediately indicates whether a reported issue exists in other code bases, branches or builds.

With this smart matching technology, development teams that re-use code across multiple systems won't waste time finding and fixing the same issues over-and-over. This new feature also helps developers prioritize issues based on both severity and prevalence across multiple code streams.

Klocwork Insight 9.5 is currently available. To learn more, go to www.klocwork.com/insight95. To attend one of two live webinars being held on Thursday, January 26 at 8:00 a.m. Eastern Time and 2:00 p.m. Eastern Time, register at www.klocwork.com/webinar-insight95.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.