Risk
12/19/2012
07:03 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%
Repost This

CrowdStrike Partners With Coverity To Ensure Software Security

CrowdStrike has built Coverity into its secure development life cycle

SAN FRANCISCO, December 19, 2012 – Coverity, Inc., the development testing leader, announced today that CrowdStrike, a security start-up focused on protecting enterprises and governments against advanced cyber attacks, has partnered with Coverity to ensure the quality and security of its software.

"As a security company, we know our software will be attacked, and so it is critical that we build security in from the ground up," said George Kurtz, CrowdStrike co-founder and CEO, and former CTO of McAfee. "We partnered with Coverity to ensure that we're only releasing the highest quality code without exploitable security defects that could put our customers at risk."

CrowdStrike has built Coverity into its secure development lifecycle to provide developers with accurate, actionable information on potential security defects and reduce the risk of exploitable vulnerabilities. By fixing security defects during development rather than after the fact, CrowdStrike also lowers development costs and releases code faster, without slowing down the development process.

"More often than not, hackers gain access to a system by exploiting common vulnerabilities--vulnerabilities that could be found much earlier by embracing a development testing technology like Coverity," said Kurtz. "As cybercriminals continue to innovate new methods of attack, it's critical for companies to ensure that the foundation of their business--the software--is secure before its deployed."

"CrowdStrike is on the front lines of security and George is a world-renowned expert on cyber security. The fact that CrowdStrike uses Coverity to secure its own technology validates the critical importance of development testing as part of a company's software security strategy," said Jennifer Johnson, VP of Marketing at Coverity. "Companies can no longer afford to let a simple software defect become the security vulnerability that brings down their systems or leaves them exposed to data theft. We are honored to work with the market leaders in security technology, from innovative start-ups such as CrowdStrike to the world's largest security software companies, as a critical part of their secure development lifecycle."

Online Resources

? Watch a video interview with George Kurtz, CEO of CrowdStrike

? Learn more about development testing

? Learn more about Coverity Security Advisor

? Read the Coverity Security Research Laboratory blog

About Coverity

Coverity, Inc., (www.coverity.com), the development testing leader, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About CrowdStrike

CrowdStrike www.crowdstrike.com is a security technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. Utilizing Big-Data technologies, CrowdStrike is developing a new and innovative approach to solving today's most demanding cyber-security challenges. CrowdStrike's core mission is to fundamentally change how organizations implement and manage security in their environment. Company was co-founded by George Kurtz, former CEO of Foundstone and Worldwide CTO at McAfee, Dmitri Alperovitch, former VP Threat Research at McAfee, and Gregg Marston, former CFO at Networks in Motion and received $26 million in Series A funding from Warburg Pincus.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Latest Comment: LOL.
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6212
Published: 2014-04-19
Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors.

CVE-2013-6213
Published: 2014-04-19
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833.

CVE-2013-6214
Published: 2014-04-19
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042.

CVE-2013-6215
Published: 2014-04-19
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977.

CVE-2013-6218
Published: 2014-04-19
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.

Best of the Web