#DOUBLETWIST RETAIL CODE FULL#

'We will take that to the next level and pull together dozens of major open-source projects, and do full analysis of those code bases,' Coverity co-founder David Park said.Ĭommercial software makers commonly use source code analysis tools, either bought or homegrown, to vet their code before releasing a product to market. The project will expand an existing Coverity initiative that already provides Linux developers with regular bug data. 'By applying the Coverity tools to both open-source and proprietary software, Coverity is getting feedback from two very different worlds of software development.' 'Our role here is to help Stanford and Coverity aim their research and development to best help commercial software developers,' Witten said. Symantec will provide security intelligence and test the source code analysis tool in its proprietary software environment, said Brian Witten, the director of government research at the Cupertino, Calif., security software vendor.

'A lot of the nation's critical computing infrastructure is open source, and it isn't really checked in an automatic way.' 'We're going to make automatic checking deeper and more thorough using the latest research and apply this to the open-source infrastructure to make it more robust,' said Dawson Engler, an associate professor at Stanford who is working on the project. Programmers working on the Linux operating system, Apache Web server, BIND Internet infrastructure software and Firefox browser, for example, will be able to fix security vulnerabilities flagged by the system before their code becomes part of a released application or operating system. The data is meant to help secure open-source software, which is increasingly used in critical systems, analysts said. The automated system should be running by March, and the resulting database of bugs will be accessible to developers, they said. In the effort, which the government agency calls the 'Vulnerability Discovery and Remediation, Open Source Hardening Project,' Stanford and Coverity will build and maintain a system that does daily scans of code contributed to popular open-source projects. List of open-source software to be analyzed in the Department of Homeland Security-sponsored project.

Doubletwist retail code