Coverity and Wind River Bring Development Testing for Security to Embedded Software Development


o Coverity and Wind River team to integrate development testing for embedded software security, making it easier and faster to find and fix security vulnerabilities in embedded device software while applications are being written.

o Coverity to offer evaluation edition of Coverity® Static Analysis pre-configured for Wind River Workbench to integrate security into the existing development workflow.

o Collaboration joins market leaders with combined track record of over 3,000 customers, more than 1 billion embedded systems using Wind River technology and more than 11 billion products tested with Coverity for quality and security defects prior to shipping.

SAN FRANCISCO AND ALAMEDA, Calif., - Coverity, the leader in development testing, and Wind River, a world leader in embedded and mobile software, have teamed to integrate Coverity's development testing platform for security with Wind River's embedded software.

Coverity will offer an evaluation edition of Coverity® Static Analysis, pre-configured for Wind River Workbench, supporting both Wind River Linux and Wind River's VxWorks real-time operating system (RTOS). This combined solution enables development teams to build security into the embedded software development process and effectively address security vulnerabilities as software code is written.

According to various market estimates, it's expected that by 2020 there will be 50 billion connected devices worldwide. As embedded devices become more connected and mobile, from medical devices to avionics and defense systems, they have become the next vector for security threats. The collaboration between Coverity and Wind River joins leaders in embedded software development and development testing. Wind River has a unique advantage within the embedded industry with its comprehensive software portfolio. Coverity automatically scans source code for security and quality defects, exposing them in the developer's existing workflow and greatly reducing the risk of security vulnerabilities making their way into the field.

"Our development testing roots began in embedded software, and today over 1,100 of the world's largest device manufacturers and software companies rely on Coverity to help prevent critical defects," said Jennifer Johnson, Vice President of Marketing at Coverity. "We are excited to join forces with Wind River, a pioneer in embedded software, ma king it easier than ever to build security into the development process without impacting rapid delivery schedules."

"Increased security threats and continued growth of embedded device connectivity create an urgent need to address security during development," said Marc Brown, Vice President of Tools and Marketing Operations, Products Group at Wind River. "Together with Coverity, we are providing embedded developers with powerful solutions to rapidly and efficiently identify and tackle software security flaws in their workflow and dramatically curb potential security issues down the road."

"Development teams are under constant time to market pressure and security is often overlooked," said Theresa Lanowitz, Co-founder of voke, inc. "The integration of Coverity and Wind River is transforming the testing market by empowering embedded development teams to address security earlier than ever before, in the same way as quality, greatly reducing the business risk of brand damage and revenue loss associated with security vulnerabilities."

Coverity's product offerings complement Wind River's broader security portfolio comprising secure operating environments, testing software, and industry expertise. Development teams in search of a complete testing solution can use Coverity to detect and fix errors during the coding phase of development before passing applications to quality assurance teams, and then use Wind River Test Management, including specific packages for security, a test automation system for embedded device software testing, to run dynamic tests during the quality assurance phase of the lifecycle.

Resources

o Sign up for the evaluation edition of Coverity Static Analysis with Wind River support.

o Read more about development testing for security in embedded devices on the Coverity blog.

o Read more about embedded software on the Wind River blog.

o Visit Coverity and Wind River at RSA 2012 next month, February 27 - March 3, at the Moscone Center in San Francisco, Booth #555.

About Coverity

Coverity, Inc., (www.coverity.com), the leader in development testing, is the trusted standard for companies that need to protect their brands and bottom lines from software failures. More than 1,100 Coverity customers use Coverity's development testing suite of products to automatically test source code for software defects that could lead to product crashes, unexpected behavior, security breaches, or catastrophic failure. Coverity is a privately held company headquartered in San Francisco. Coverity is funded by Foundation Capital and Benchmark Capital. Follow us on Twitter or check out our blog.

About Wind River

Wind River, a wholly owned subsidiary of Intel Corporation (NASDAQ: INTC), is a world leader in embedded and mobile software. Wind River has been pioneering computing inside embedded devices since 1981 and its technology is found in more than 1 billion products. Wind River is headquartered in Alameda, Calif., with offices in more than 20 countries. To learn more, visit Wind River at www.windriver.com or on Facebook.

SOURCE Coverity

CONTACT: Katherine Nellums for Coverity, +1-415-321-2347, Katherine.nellums@lewispulse.com; or Jenny Suh of Wind River, +1-510-749-2972, Jenny.suh@windriver.com

Web Site: www.windriver.com

All Topics