Risk
12/19/2012
07:03 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

CrowdStrike Partners With Coverity To Ensure Software Security

CrowdStrike has built Coverity into its secure development life cycle

SAN FRANCISCO, December 19, 2012 – Coverity, Inc., the development testing leader, announced today that CrowdStrike, a security start-up focused on protecting enterprises and governments against advanced cyber attacks, has partnered with Coverity to ensure the quality and security of its software.

"As a security company, we know our software will be attacked, and so it is critical that we build security in from the ground up," said George Kurtz, CrowdStrike co-founder and CEO, and former CTO of McAfee. "We partnered with Coverity to ensure that we're only releasing the highest quality code without exploitable security defects that could put our customers at risk."

CrowdStrike has built Coverity into its secure development lifecycle to provide developers with accurate, actionable information on potential security defects and reduce the risk of exploitable vulnerabilities. By fixing security defects during development rather than after the fact, CrowdStrike also lowers development costs and releases code faster, without slowing down the development process.

"More often than not, hackers gain access to a system by exploiting common vulnerabilities--vulnerabilities that could be found much earlier by embracing a development testing technology like Coverity," said Kurtz. "As cybercriminals continue to innovate new methods of attack, it's critical for companies to ensure that the foundation of their business--the software--is secure before its deployed."

"CrowdStrike is on the front lines of security and George is a world-renowned expert on cyber security. The fact that CrowdStrike uses Coverity to secure its own technology validates the critical importance of development testing as part of a company's software security strategy," said Jennifer Johnson, VP of Marketing at Coverity. "Companies can no longer afford to let a simple software defect become the security vulnerability that brings down their systems or leaves them exposed to data theft. We are honored to work with the market leaders in security technology, from innovative start-ups such as CrowdStrike to the world's largest security software companies, as a critical part of their secure development lifecycle."

Online Resources

? Watch a video interview with George Kurtz, CEO of CrowdStrike

? Learn more about development testing

? Learn more about Coverity Security Advisor

? Read the Coverity Security Research Laboratory blog

About Coverity

Coverity, Inc., (www.coverity.com), the development testing leader, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About CrowdStrike

CrowdStrike www.crowdstrike.com is a security technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. Utilizing Big-Data technologies, CrowdStrike is developing a new and innovative approach to solving today's most demanding cyber-security challenges. CrowdStrike's core mission is to fundamentally change how organizations implement and manage security in their environment. Company was co-founded by George Kurtz, former CEO of Foundstone and Worldwide CTO at McAfee, Dmitri Alperovitch, former VP Threat Research at McAfee, and Gregg Marston, former CFO at Networks in Motion and received $26 million in Series A funding from Warburg Pincus.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-5242
Published: 2014-10-21
Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter in a get_template action.

CVE-2012-5243
Published: 2014-10-21
functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request.

CVE-2012-5702
Published: 2014-10-21
Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) callback parameter in a color_selector action, (2) field parameter in a date_format action, or (3) company_name parameter in an addedit action to i...

CVE-2013-7406
Published: 2014-10-21
SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVE-2014-2531
Published: 2014-10-21
SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the (1) NodeWorx , (2) SiteWorx, or (3) R...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.