Risk
12/19/2012
07:03 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

CrowdStrike Partners With Coverity To Ensure Software Security

CrowdStrike has built Coverity into its secure development life cycle

SAN FRANCISCO, December 19, 2012 – Coverity, Inc., the development testing leader, announced today that CrowdStrike, a security start-up focused on protecting enterprises and governments against advanced cyber attacks, has partnered with Coverity to ensure the quality and security of its software.

"As a security company, we know our software will be attacked, and so it is critical that we build security in from the ground up," said George Kurtz, CrowdStrike co-founder and CEO, and former CTO of McAfee. "We partnered with Coverity to ensure that we're only releasing the highest quality code without exploitable security defects that could put our customers at risk."

CrowdStrike has built Coverity into its secure development lifecycle to provide developers with accurate, actionable information on potential security defects and reduce the risk of exploitable vulnerabilities. By fixing security defects during development rather than after the fact, CrowdStrike also lowers development costs and releases code faster, without slowing down the development process.

"More often than not, hackers gain access to a system by exploiting common vulnerabilities--vulnerabilities that could be found much earlier by embracing a development testing technology like Coverity," said Kurtz. "As cybercriminals continue to innovate new methods of attack, it's critical for companies to ensure that the foundation of their business--the software--is secure before its deployed."

"CrowdStrike is on the front lines of security and George is a world-renowned expert on cyber security. The fact that CrowdStrike uses Coverity to secure its own technology validates the critical importance of development testing as part of a company's software security strategy," said Jennifer Johnson, VP of Marketing at Coverity. "Companies can no longer afford to let a simple software defect become the security vulnerability that brings down their systems or leaves them exposed to data theft. We are honored to work with the market leaders in security technology, from innovative start-ups such as CrowdStrike to the world's largest security software companies, as a critical part of their secure development lifecycle."

Online Resources

? Watch a video interview with George Kurtz, CEO of CrowdStrike

? Learn more about development testing

? Learn more about Coverity Security Advisor

? Read the Coverity Security Research Laboratory blog

About Coverity

Coverity, Inc., (www.coverity.com), the development testing leader, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About CrowdStrike

CrowdStrike www.crowdstrike.com is a security technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. Utilizing Big-Data technologies, CrowdStrike is developing a new and innovative approach to solving today's most demanding cyber-security challenges. CrowdStrike's core mission is to fundamentally change how organizations implement and manage security in their environment. Company was co-founded by George Kurtz, former CEO of Foundstone and Worldwide CTO at McAfee, Dmitri Alperovitch, former VP Threat Research at McAfee, and Gregg Marston, former CFO at Networks in Motion and received $26 million in Series A funding from Warburg Pincus.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8802
Published: 2015-01-23
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

CVE-2014-9623
Published: 2015-01-23
OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quote and cause a denial of service (disk consumption) by deleting an image in the saving state.

CVE-2014-9638
Published: 2015-01-23
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVE-2014-9639
Published: 2015-01-23
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVE-2014-9640
Published: 2015-01-23
oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.