Home > Klocwork Unveils Static Analysis Debug Tool

News

Klocwork Unveils Static Analysis Debug Tool

2/4/2008

Klocwork last week announced the debut of a new static analysis tool that aims to ensure quality and security in the code development process, both at the level of the desktop and organization wide.

The new Klocwork Insight product is a "second generation" static analysis tool, according to Gwyn Fisher, Klocwork's CTO. It goes beyond just the mechanics of tracking missing semicolons and brackets.

As second-generation technology, Insight represents a step forward in terms of the kinds of bugs that can be found, Fisher explained.

"Instead of worrying about code structure and coding practice, now it's worrying about where we are leaking memory, where are we going to be vulnerable, where are going to use memory that's already been freed," he said.

Those kinds of problems typically are found during the traditional compiler-link build phase, Fisher said, although static analysis happens without actually compiling code.

"It's very analogous to compiling," he said. "We call it compiling, as do many of our competitors."

Another feature of Insight is that it is designed to meet the needs of a software development lifecycle.

"The real key invention here--and this is patent pending for the Insight release--is the ability to take the analysis that is performed centrally (i.e., modeling the entire software project, the entire system) and projecting down to each individual developer sufficient knowledge from that central model," Fisher said.

As a consequence, developers responsible for a small component of the project can still understand what is going on as they "step up outside of that small component by a function call or dereferencing a function point or whatever they happen to be doing," Fisher explained.

Development managers can use Insight to understand how individual developers, groups of developers and organizations of developers are doing. Insight has a reporting, trending, and metrics management environment exposed through an AJAX-enabled Web portal, which gives managers a graphical view of the project's code-based health, Fisher said.

The product also enables collaboration on bugs, providing a "continuous feedback loop for educational purposes," he added, and facilitating role-based security and policy-based control.

Insight also lets developers build their own checkers using a declarative language that's heavily influenced by XPath. "You can state what kinds of behavior you are looking for in a very simple query-oriented manner," Fisher said.

Klocwork Insight is priced by developer, starting at $25,000, which includes one server and five developer seats; additional developer seats beyond that cost $2,750, according to Brendan Harrison, Klocwork's director of marketing. The product is currently available in two versions, one for C/C++ and one for Java.

Harrison said that Klocwork was founded in 2001 and currently has more than 250 professional developer customers, spanning various industries, including telecom, aerospace, finance and insurance, among others.

"That number grew by 100 over the last 12 months, so we're definitely on a good trajectory in terms of growth rate," Harrison added.

Further information on Klocwork Insight is available here.


Kurt Mackie is Web editor of RCPmag.com and ADTmag.com. He can be reached at kmackie@1105media.com.

Cite this Site

Kurt Mackie, "Klocwork Unveils Static Analysis Debug Tool," Campus Technology, 2/4/2008, http://www.campustechnology.com/article.aspx?aid=58048

copy text (above) for proper citation



Recommended Reading
  • Sun, Stanford Working To Archive History

    In May in San Francisco, experts from leading universities, libraries, and research institutions around the world met as part of an ongoing effort to address a pressing issue: archiving the world's history, right up to today.

  • The Quilt Coalition Rolls Out XO Communications for High-Capacity Network Services

    The Quilt, a coalition of 28 regional network organizations, has added XO Communications Services to its authorized vendor list. The Quilt represents 200 universities and thousands of other educational institutions across the United States. With this new relationship, Quilt members can purchase XO's high-speed IP transit and network transport services at competitive rates.

  • Wimba Classroom 5.2 Expands Classroom Capture Support, Adds MP3 Downloads

    At the NECC 2008 conference in Texas this week, Wimba launched a new version of Wimba Classroom, the virtual classroom component of the company's Collaboration Suite. The new 5.2 release expands options for classroom capture and adds a variety of other functional and ease of use features.

  • Automation Chimera: Education Is Not Management

    The lure of automating workflow online so human intervention is minimized is continually reinforced in the minds of higher education administrators by examples of automated campus systems such as financials, student information systems, and other enterprise systems. But what's good for management is not always good for learning.

  • Cognos Releases BI Software for Linux-based IBM System z Mainframe

    Cognos, which IBM acquired in January, has released an update to its business intelligence software that will run on the Linux operating system on IBM System z mainframes. IBM Cognos 8 BI was being developed by the two companies prior to the acquisition, but assimilation of Cognos into IBM accelerated development.

  • Facebook and Collegiality: A Serendipitous Social Niche

    Facebook is a way to greet a colleague as if she or he is on your own campus: a wave at a distance, a hello at the corner burrito place, a honk as you both leave the campus parking lot. Informal collegiality has been extended over the miles.