Wednesday, 31 January 2007

Klocwork Static Analysis Tool Available

Klocwork, a provider of automated software for improving software security and quality , announced the release of Klocwork Developer for Java (KDJ). Available as a downloadable plug-in for Eclipse-based Java IDEs, KDJ provides enterprise-grade source code analysis directly on an individual developer's desktop. According to the company, KDJ automatically identifies security vulnerabilities and defects at the earliest possible stage of the development cycle, enabling the developer to focus on high quality, innovative code.
Built upon Klocwork technology, KDJ is a static code analysis tool available for the individual developer desktop, giving a high degree of accuracy and efficiency.

Features include:

• Search for critical Java defects and security vulnerabilities including array bounds violations, null pointer dereferences, cross site scripting, SQL injection, process creation injection, and resource leaks
• Support for Java 1.5 specification for J2EE, J2SE and J2ME, as well as full support for earlier language specifications
• Java security analysis aligned with OWASP
• Customisable code analysis
• Integration with any Eclipse-based IDE, certified as "Ready For Rational" for use with IBM Rational Application Developer.