Embedded software security analysis gets visual
14.00
By accelerating the speed and accuracy of embedded development teams to trace these flows, this technology will help eliminate dangerous vulnerabilities such as buffer overruns that can be exploited by an attacker to inject code, claims the software tool vendor.
“Tainted data vulnerabilities are notoriously difficult for developers to find because applications often use code from different sources, which creates unexpected attack surfaces that malicious hackers can exploit,” explains Dr. Paul Anderson, GrammaTech VP of Engineering in a statement.
GrammaTech’s visual taint analysis tracks potentially hazardous data flows in C/C++ applications that are too complicated for developers to reliably find manually. When identified, CodeSonar records the paths the data can take through the application that can then cause unexpected or insecure program behaviour. Unlike other tools that provide simple warnings for tainted values, CodeSonar’s proprietary visualization engine presents vulnerabilities to developers in a more actionable and auditable interface.
By showing the tainted flows and by overlaying taint markers on renderings of source code, developers can see the effect of hazardous inputs on the behaviour of their code.
Check out the company’s whitepaper at https://www.grammatech.com/whitepapers/protecting-against-tainted-data-with-static-analysis.
Visit GrammaTech at www.grammatech.com
Normal
0
false
false
false
EN-GB
X-NONE
X-NONE
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:”Table Normal”;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:””;
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:”Calibri”,”sans-serif”;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
