Risk
12/19/2012
07:03 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

CrowdStrike Partners With Coverity To Ensure Software Security

CrowdStrike has built Coverity into its secure development life cycle

SAN FRANCISCO, December 19, 2012 – Coverity, Inc., the development testing leader, announced today that CrowdStrike, a security start-up focused on protecting enterprises and governments against advanced cyber attacks, has partnered with Coverity to ensure the quality and security of its software.

"As a security company, we know our software will be attacked, and so it is critical that we build security in from the ground up," said George Kurtz, CrowdStrike co-founder and CEO, and former CTO of McAfee. "We partnered with Coverity to ensure that we're only releasing the highest quality code without exploitable security defects that could put our customers at risk."

CrowdStrike has built Coverity into its secure development lifecycle to provide developers with accurate, actionable information on potential security defects and reduce the risk of exploitable vulnerabilities. By fixing security defects during development rather than after the fact, CrowdStrike also lowers development costs and releases code faster, without slowing down the development process.

"More often than not, hackers gain access to a system by exploiting common vulnerabilities--vulnerabilities that could be found much earlier by embracing a development testing technology like Coverity," said Kurtz. "As cybercriminals continue to innovate new methods of attack, it's critical for companies to ensure that the foundation of their business--the software--is secure before its deployed."

"CrowdStrike is on the front lines of security and George is a world-renowned expert on cyber security. The fact that CrowdStrike uses Coverity to secure its own technology validates the critical importance of development testing as part of a company's software security strategy," said Jennifer Johnson, VP of Marketing at Coverity. "Companies can no longer afford to let a simple software defect become the security vulnerability that brings down their systems or leaves them exposed to data theft. We are honored to work with the market leaders in security technology, from innovative start-ups such as CrowdStrike to the world's largest security software companies, as a critical part of their secure development lifecycle."

Online Resources

? Watch a video interview with George Kurtz, CEO of CrowdStrike

? Learn more about development testing

? Learn more about Coverity Security Advisor

? Read the Coverity Security Research Laboratory blog

About Coverity

Coverity, Inc., (www.coverity.com), the development testing leader, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About CrowdStrike

CrowdStrike www.crowdstrike.com is a security technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. Utilizing Big-Data technologies, CrowdStrike is developing a new and innovative approach to solving today's most demanding cyber-security challenges. CrowdStrike's core mission is to fundamentally change how organizations implement and manage security in their environment. Company was co-founded by George Kurtz, former CEO of Foundstone and Worldwide CTO at McAfee, Dmitri Alperovitch, former VP Threat Research at McAfee, and Gregg Marston, former CFO at Networks in Motion and received $26 million in Series A funding from Warburg Pincus.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9710
Published: 2015-05-27
The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time windo...

CVE-2014-9715
Published: 2015-05-27
include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via outbound network traffic that trig...

CVE-2015-2666
Published: 2015-05-27
Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to t...

CVE-2015-2830
Published: 2015-05-27
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrate...

CVE-2015-2922
Published: 2015-05-27
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

Dark Reading Radio
Archived Dark Reading Radio
After a serious cybersecurity incident, everyone will be looking to you for answers -- but you’ll never have complete information and you’ll never have enough time. So in those heated moments, when a business is on the brink of collapse, how will you and the rest of the board room executives respond?