Sep 29, 2021 Security

Synopsys partners with Wind River with its industry-leading Coverity static analysis solution

By guest contributor Alex Weiland, Sr. Product Manager, Synopsys

AlexWeiland--1-

Highlights:

● Synopsys® is a Leader in static analysis, as recognized in the Forrester Wave for SAST and the 2021 Gartner® Magic Quadrant™ for Application Security Testing reports.

Coverity supports cloud-native application development with Docker containers and Kubernetes.

● Synopsys is one of the first major partners of the new Wind River Studio, which delivers transformational automation technologies across the intelligent systems life cycle.

Synopsys and Wind River: A partnership to improve cloud-native security

Synopsys is pleased to be partnering with Wind River as the static application security testing (SAST) solution in the latest Wind River Studio offering. Wind River Studio is a cloud-native platform for the development, deployment, operations, and servicing of mission-critical intelligent systems, from devices to the cloud. This partnership will enable dramatic improvements in productivity, agility, and time-to-market, with seamless technology integration that includes far-edge cloud compute, data analytics, security, 5G, and AI/ML.

“We are pleased to include Coverity static analysis in the partner ecosystem for Wind River Studio,” said Michel Chabroux, senior director, Product Management, Wind River. “Developers can now leverage Coverity’s accurate and deep code analysis capabilities, and security standards scanning directly within Wind River Studio’s cloud-native platform. Automation is a key tenet of fast-turn CI/CD workflows and container-based development, and having Coverity integrated will certainly help our customers from the start.”

A new era of digital innovation

Synopsys technology is at the heart of innovations that are changing the way people work and play. Self-driving cars, machines that learn, lightning-fast communication across billions of devices in the datasphere—these breakthroughs are ushering in the era of “Smart Everything,” where devices are getting smarter and connected, and security is an important consideration.

Powering this new era of digital innovation are high-performance silicon chips and the exponential growth of software content. Synopsys is at the forefront of Smart Everything with the world’s most advanced technologies for chip design, verification, IP integration, and software security and quality testing. We help our customers innovate from silicon to software, so they can bring Smart Everything to life.

Coverity static analysis provides comprehensive analysis, accuracy, speed, and industry standards compliance, with over 15 years of analysis engine optimization (in-depth interprocedural analysis, whole program analysis, low false positives). It also enables modern app development with Docker containers and Kubernetes. Coverity is targeting deployments on the leading public cloud providers, AWS and GCP.

The analyst firm Gartner predicts that by 2023, 70% of organizations will be running three or more containerized applications in production. Containers, Kubernetes, and microservices application patterns are three of the leading drivers of enterprise IT innovation and digital transformation. Companies have embraced these technologies for their advantages in application development and deployment.From Gartner, Infographic: Container Adoption Trends, Dennis Smith and Raj Bala, 27th July, 2021 the trends show that use cases are expanding at the following rates:

Windows Applications 30%, Legacy Applications 34%, Linux Applications 48%, The Basis for Cloud Native Strategy 51%, Using Microservices Architecture 5% and New Applications 73%.

Wind River Studio supports the leading public cloud providers such as AWS and Azure, which have a strong presence with intelligent system device manufacturers. Additionally, Wind River’s core portfolio includes support for the following SDKs for out-of-the-box edge-to-cloud connectivity:

● The AWS IoT Device SDK for Embedded C, targeting resource-constrained devices that require an optimized C language runtime

● The Microsoft Azure IoT Hub C device SDK, designed to simplify the process of sending and receiving messages from the Azure IoT Hub service

The partnership of Wind River Studio with Synopsys in a public cloud will provide customers great advantages is the embedded software development space.

* GARTNER and MAGIC QUADRANT are registered trademarks and service marks of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

** Blog post originally published on Synopsys.com.

Previous Meet Wind River Aerospace and Defense DTO: Roberto Valla
Next Telco Opportunities for Private 5G