| |
|
SofCheck Inspector™ for Java and Ada
Find More Errors. Faster.
SofCheck Inspector technology helps eliminate programming errors
by performing advanced static analysis on the program source code. First,
the SofCheck Inspector tool reads the entire program and automatically
creates assertions (preconditions and postconditions) characterizing each
module. The SofCheck Inspector tool then attempts to prove that the entire
software system obeys all assertions. Finally, the SofCheck Inspector
tool attempts to prove the absence of runtime errors, such as buffer overflows,
which are responsible for many Internet security breaches.
Speed Time to Market
The SofCheck Inspector product performs the work that a large group of
quality assurance engineers might be unable to complete with dynamic code
testing,
such as inspecting every line of a 750,000 line system for possible
out-of-range data. The SofCheck Inspector tool can also uncover potential
faults and security breaches in legacy systems that are currently running
in safety critical systems. In addition to reducing the cost of finding
defects in existing software, SofCheck Inspector technology can be used
earlier in the development life cycle to identify problems when defects
are less costly to repair. The SofCheck Inspector product can be used
in conjunction with existing development tools and procedures to augment
quality — no prior corporate investment is lost.
SofCheck Inspector Maximizes Your ROI
For example, assuming a typical rate of 2 defects per 1,000 lines of code
and 2 person-days to find and fix one defect during an Integration Phase,
our 250,000 lines of code example will yield 500 defects and require 3.8
person-years to repair. In contrast, the SofCheck Inspector tool can be
run before the Integration Phase and virtually eliminates the cost of
finding defects, allowing rapid repair in the Development Phase. Bugs
found in Development are considered only 10% as costly to fix as bugs
found in Integration, or 0.2 person-days per defect in our example. The
SofCheck Inspector product reduces the find-and-fix effort by 3.4 person-years,
delivering higher quality code sooner and with more surety. With an annual
subscription pricing model on the order of $500 per thousand lines of
code, organizations may realize annual labor savings of three to four
times their investment, along with significant improvements in time to
market.
Easily Integrates with Existing Systems
SofCheck Inspector technology is also useful for existing production systems.
The costs of a single buffer overflow defect that allows exploitation
by a virus such as Nimbda, Code Red or Sasser can be huge. Breaches exist
in production systems today, and the SofCheck Inspector tool can help
rapidly find those defects.
SofCheck Testing Assures Code Confidence
SofCheck Inspector technology goes well beyond the normal type checking
provided by some programming languages, and scales better than alternative
static error detection approaches such as program verification or model
checking. It takes advantage of efficient control-flow and data-flow analyses
originally  developed
for compiler optimizations. Note that dynamic testing such as that provided
by a QA organization is still needed to verify desired functional behavior,
but this testing is far more effective after having run the SofCheck Inspector
tool because crashes and anomalous behavior due to numeric overflows or
wraparounds have been eliminated. For example, the correctness of a calculation
between Fahrenheit and Celsius is a functional behavior that can be verified
with runtime testing. A divide-by-zero condition in the same program,
however, is a runtime failure behavior that the SofCheck Inspector tool
would always flag. Runtime debugging time – and cost – is
dramatically reduced by static error detection because it eliminates all
causes of program runtime failures (i.e., “crashes”). The
SofCheck Inspector product works by finding errors without running the
program or the need to laboriously write test cases.
The SofCheck Inspector for Java premiered supporting the Java
language. SofCheck Inspector for Ada now supports the Ada language 1983 and 1995 versions.
Download Free Trial of Inspector™ for Java
Find More Errors. Today....
Go to our eSellerate, our preferred download partner,
and get a
free trial of SofCheck Inspector for Java
and see what static error detection
technology can uncover in your code. At the store page, buy both the software and
a 45-day trial key. You will be asked to provide your contact information, but you will not
be charged. No payment
credentials are required.
Have to keep a copy for yourself? You can purchase
and immediately download commercial versions
of SofCheck Inspector for Java sized just right for developers of small and medium-sized projects.
SofCheck's static error detection technology shines brightest when scaled up to inspect
complex, enterprise-sized systems. If you require unlimited analysis of enterprise class
systems in Java or Ada, contact sales@sofcheck.com for custom service.
|
|
