Parasoft Resources Center: Static Analysis

Static Analysis & Development Testing for Embedded Devices   by Jason Schadewald (Product Manager)

Many developers are overwhelmed by static analysis & other development testing practices. Here are some tips to help you manage the validity and quantity of results with minimal human intervention.

How to Spring Clean Your Static Analysis: 10 Tips   by Cynthia Dunlop (Lead Technical Writer), Arthur Hicken (Evangelist)

Get 10 tips for revitalizing your existing static analysis implementation—no matter what static analysis tool you're using.

The Static Analysis Spectrum: 5 Types of Static Code Analysis   by Arthur Hicken (Evangelist), Wayne Ariola (Chief Strategy Officer), Adam Trujillo (Technical Writer)

Different types of static analysis serve different purposes. Choosing the right one makes the difference between wasting time & money and developing better software faster.

Getting Down to Business: Leveraging the Right Static Analysis , Embedded Computing Design  by Arthur Hicken (Evangelist), Wayne Ariola (Chief Strategy Officer), Adam Trujillo (Technical Writer)

There are different implementations of static analysis that serve different purposes in the development process. The proper implementation of the right technologies is the difference between wasting time and money and reaching new software development heights.

False Positives in Static Code Analysis   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

"Too many false positives" is one the most common excuses for avoiding static analysis. This blog explores what "false positives" really are gives tips on how to manage them.

Give Your Static Analysis Process the Love it Deserves   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Get tips for expanding and optimizing your team’s static analysis process.

Get Your Static Analysis Tool in Sync with Your Policies & Priorities   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Provides a few quick tips for getting your static analysis tool in sync with your team’s policies and priorities.

Static Analysis Tools: When Less is More   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Is your static analysis tool reporting an overwhelming number of violations? Try these 2 tips for slimming down your static analysis tool’s violation reports.

How the Grinch Stole Testing

Learn why static analysis and other development testing practices are so noisy & get tips for cutting back on all that noise, noise, noise!

Top 3 Mistakes w/ Static Analysis for Embedded & Safety-Critical Development , EE Catalog  by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Learn the top 3 reasons why static analysis initiatives don’t deliver real value in embedded and safety-critical development environments—and get tips for avoiding these common pitfalls.

Static Analysis: The Top 10 Mistakes , Parasoft White Paper  by Arthur Hicken (Evangelist), Wayne Ariola (Chief Strategy Officer), Cynthia Dunlop (Lead Technical Writer)

See the top 10 reasons why static analysis initiatives don’t deliver real value—and get some tips for avoiding these common pitfalls.

Parasoft TV - Static Analysis Best Practices

Learn best practices necessary to achieve real results with static code analysis.

Parasoft TV - Integrated Error Detection Techniques for Java

Demonstrates how to automate and synchronize error-detection techniques—including static code analysis, data flow analysis, unit testing, and runtime error detection—to more effectively find defects in Java applications.

Parasoft TV - Multiple Error Detection Techniques for Embedded Software Development

Demonstrates how to automate and synchronize error-detection techniques—including static code analysis, data flow analysis, unit testing, and runtime error detection—to more effectively find defects in embedded C applications.

Parasoft TV - Parasoft C/C++test for Embedded Development

Demonstrates how Parasoft C/C++test enables teams to produce better code for embedded systems, test it more efficiently, and monitor progress towards their quality goals.

Parasoft TV - Top 10 Mistakes with Static Analysis

Learn the top 10 reasons why static analysis initiatives fail to deliver the expected results—and how you can steer clear of these common pitfalls.

Parasoft TV - Introduction to Parasoft C/C++test

Introduces how Parasoft C/C++test automates comprehensive development testing for C and C++, including static analysis, unit testing, code review, runtime error detection, and more.

Parasoft TV - FDA Compliance Static Analysis and Beyond

Learn how static analysis can be a key component of your strategy for FDA software validation.

Parasoft TV - Real Value with Static Analysis

Describes best practices for achieving real value with static analysis: continuous builds, email notifications, IDE quick-fixes, and trend reporting.

Parasoft TV - Take the Static Analysis Challenge

Take the Parasoft challenge and see if you can beat Parasoft's static analysis in finding hidden defects in Java code.

Parasoft TV - How to Select a Static Analysis Tool

Presents a 6-step strategy for selecting a static analysis tool that your team will actually use—now & in the future.

Integrated Error-Detection Techniques Find More Bugs in Embedded C Software , Parasoft White Paper  by Marek Kucharski (President Parasoft SA, VP of Dev), Cynthia Dunlop (Lead Technical Writer)

Demonstrates how to automate and synchronize error-detection techniques—including static code analysis, data flow analysis, unit testing, and runtime error detection—to more effectively find defects in embedded C applications.

Static Analysis Spring Cleaning   by Cynthia Dunlop (Lead Technical Writer), Arthur Hicken (Evangelist)

Get 10 tips for revitalizing your existing static analysis implementation—no matter what static analysis tool you're using.

Static Analysis and Dynamic Analysis   by Boguslaw Czwartkowski (Professional Services Manager), Cynthia Dunlop (Lead Technical Writer)

Explains how dynamic analysis complements static analysis.

In the News: Static Analysis, Service Virtualization, Requirements Traceability   by Cynthia Dunlop (Lead Technical Writer)

A round up of some recent articles about static analysis, service virtualization, defect prevention, and safety-critical development.

SELEX Case Study - 553 KB PDF

SELEX wanted to eliminate software defects early in the SDLC. Learn how Parasoft static analysis helped them increase reliability while reducing reduced development time, costs, and resources.

Thales Case Study - 555 KB PDF

By applying Parasoft solutions to its Integrated Tramway Management Solutions project—then later deploying it across the entire Automatic Vehicle Location System division—Thales Italia reduced its rate of defective components by 30% and significantly increased application performance.

IMA Case Study - 561 KB PDF

By working with Parasoft , IMA significantly increased the efficiency and auditability of the strict quality process they adopted to comply with pharmaceutical industry regulations.

Static Analysis Tool Evaluation Guide   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Follow these 6 steps to choose a static analysis tool that your team will actually use—now & in the future.

Integrating Error-Detection Techniques to Find More Bugs in Embedded C Software , Embedded Computing Design  by Marek Kucharski (President Parasoft SA, VP of Dev), Miroslaw Zielinski (C++test Development Mgr), Cynthia Dunlop (Lead Technical Writer)

Demonstrates how automated techniques such as pattern-based static code analysis, runtime memory monitoring, unit testing, and flow analysis can be used together to find bugs in a sample embedded C application.

.NET Static Analysis and Parasoft dotTEST , InfoQ  by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Provides practical tips for using static analysis to prevent defects in .NET and other programming languages (C, C++, Java, etc.).

Input Validation: Immunity Against Web Attacks   by Arthur Hicken (Evangelist), Cynthia Dunlop (Lead Technical Writer)

Explains how to prevent injection attacks by using input validation and static analysis to build security into your application.

Jtest: Java Static Analysis, Code Review, Unit Testing, Security - 998 KB PDF

This data sheet introduces Parasoft Jtest , an integrated Java testing toolkit for static code analysis, code review, automated unit and component testing, coverage analysis, runtime error detection, and regression testing.

C/C++test: C/C++ Static Analysis, Code Review, Unit Testing, Security - 1,108 KB PDF

This data sheet introduces Parasoft C/C++test, an integrated C and C++ testing toolkit for static code analysis, code review, automated unit and component testing, coverage analysis, runtime error detection, and regression testing.

Static Analysis for FDA Software Validation Compliance eBook   by Wayne Ariola (Chief Strategy Officer), Cynthia Dunlop (Lead Technical Writer)

To assist organizations that are exploring static analysis for FDA compliance, this 12-page guide describes Parasoft's static analysis capabilities in the context of FDA compliance.

What Do Developers Hate Most About Static Analysis?   by Cynthia Dunlop (Lead Technical Writer)

Presents results from a recent survey on what developers hate most about static analysis.

Inomed Case Study - 568 KB PDF

Inomed wanted to streamline the risk management processes they established for IEC 62304 medical device software certification. Learn how they increased efficiency through automation—and also achieved full requirements traceability.

dotTEST: .NET Static Analysis, Code Review, Unit Testing, Security - 1,086 KB PDF

This data sheet introduces Parasoft dotTEST, an integrated .NET language testing toolkit for static code analysis, code review, automated unit and component testing, coverage analysis, and regression testing.

Static Code Analysis Best Practices , Parasoft White Paper  by Adam Kolawa (CEO and co-founder), Wayne Ariola (Chief Strategy Officer), Cynthia Dunlop (Lead Technical Writer)

Explains how static analysis (static code analysis, data flow analysis, and metrics) can help your team improve code security, reliability, performance, and maintainability—and how to get started as painlessly as possible.

Static Analysis Starter Kit

This 20-page eKit explains how to get started with static analysis (coding standards/static code analysis, data flow & metrics) as painlessly as possible.

Java Testing & Java Analysis Starter Kit

This 25 page eKit explains how Parasoft Jtest simplifies Java unit testing (including JUnit test generation & TDD), static analysis (code analysis, data flow, metrics), runtime error detection, and code review.

Samsung Electronics Case Study - 553 KB PDF

To deliver more and more complex functionality in less time than ever before, Samsung turned to static analysis. Learn how they accelerated development while maintaining stringent quality standards.

Static Code Analysis Rule Set Optimization Can Uncover More Defects

Shows how static analysis--specifically, fine-tuning a team's static code analysis rule set--helped Parasoft's development team eliminate defects.

Static Analysis Finds Software Defects that Functional Tests Miss

Provides an example of how static analysis exposes software defects that functional testing would miss.

Integrated Error-Detection Techniques Find More Bugs in .NET Applications , Parasoft White Paper

Demonstrates how to automate and synchronize error-detection techniques—including static code analysis, data flow analysis, and unit testing—to more effectively find defects in .NET applications.

Static Analysis and Run Time Error Detection on 64-Bit Platforms

Introduces a strategy for identifying run time memory errors and other defects after porting software code to 64-bit processors or platforms.

Static Analysis for Porting Code to 64-Bit Platforms

Introduces static analysis rules that help you remove memory errors and other defects when porting code to 64-bit platforms

Wipro Case Study - 625 KB PDF

To remain competitive, Wipro needed a more efficient and cost-effective way to maintain the exceptional quality standards that they pride themselves on. Find out how an automated testing infrastructure helped them achieve their quality objectives while reducing testing time and effort by 25%.

Success with Static Analysis for Security: Why Code Audits Fail , Parasoft White Paper

Explains why and how to apply static analysis tools in the context of a policy-based security process that not only prevents security vulnerabilities, but also focuses on SDLC productivity.

Expose Concurrency Defects in Java

Learn how to expose and prevent concurrency defects that cause deadlocks, performance degradation, data corruption, and more.

Automating .NET Development Best Practices: The Fast Track to Reliable .NET Software , Parasoft White Paper

Introduces the best practices shown to have the greatest impact on .NET code's reliability, agility, and maintainability, then explains how automation can help your team take advantage of these best practices without disrupting or slowing your normal processes.

Cisco Case Study - 550 KB PDF

To comply with corporate quality and security initiatives, Cisco Systems adopted static analysis, unit testing and code review. Learn how they automated these practices and seamlessly integrated them into their existing processes to deliver compliant code without impeding productivity.

Trane Case Study - 549 KB PDF

Trane decided to migrate their legacy systems to C++ and .NET to enable more rapid and agile responses to business demands. Discover how Parasoft reduced the learning curve, helped them ensure code met uniform expectations around reliability, performance, and maintainability, and helped them achieve nearly 100% coverage on unit tests.

C and C++ Data Flow Static Analysis , Parasoft White Paper

Demonstrates how Parasoft's data flow analysis for C and C++ provides automated detection of runtime errors such as memory and resource management problems, buffer overruns, thread management errors, dead code, exceptions, and security vulnerabilities

Integrated Error-Detection Techniques Find More Bugs in Java Applications , Parasoft White Paper

Demonstrates how to automate and synchronize error-detection techniques—including static code analysis, data flow analysis, unit testing, and runtime error detection—to more effectively find defects in Java applications.

Bovie Medical Case Study - 565 KB PDF

Bovie Medical had been using an outside vendor to perform the software validation required for FDA compliance, but they wanted to improve the effectiveness of testing while at the same time reduce testing costs. Learn how Parasoft helped them move verification and validation testing in-house—cutting costs approximately in half and getting to market 6 months sooner.

NEC Telecom Software Philippines Case Study - 561 KB PDF

NEC Telecom Software Philippines (NSP) needed an alternative to manual code review and unit testing in order to comply with internal quality initiatives while working under a tight schedule. Find out how Parasoft helped them streamline their internal quality processes to more efficiently satisfy quality initiatives.

Security Code Audits: One Size Does Not Fit All , Software Test & Performance - 628 KB PDF

Introduces best practices for applying security static analysis, data flow analysis, penetration testing, and workflow optimization to bake security into the application development process.

Data Flow Static Analysis: Static Analysis on Steroids , Parasoft White Paper

Explains how data flow analysis can be applied to bolster both your static analysis and unit testing efforts.

Static Analysis, Security Failure , Software Test & Performance

Discusses why a policy-based approach is the secret to success with static analysis.

Intermoco Case Study - 1,244 KB PDF

Intermoco's engineering organization is responsible for both the "server side" (or database) activities associated with its network operations center as well as "embedded" solutions associated with metering and communication units in the field. Learn how Parasoft helped them double testing coverage, reducing the risk of inaccurate reporting and unit failures in the field.

Parasoft .TEST 4.0: How to Best Combat Errors in .NET Applications , Software Developer's Journal - 867 KB PDF

Parasoft .TEST 4.0: How to Best Combat Errors in .NET Applications

Best Practices for Bulletproofing C/C++ Code , Parasoft White Paper

Examines several techniques that reduce the risks of errors when extending an existing code base, as well as improve the stability and quality of the project's evolving code base.

The Yin and Yang of Software Development: 5 Best Practices that Allow Efficiency and Creativity to Productively Coexist , Parasoft White Paper

Explains how 5 best practices reduce the amount of avoidable waste in the software development process, enabling developers to satisfy business goals without compromising their craft.

Building Security into Software with Security Policies & Static Analysis , Java Developer's Journal

Discusses why the most effective security efforts define a policy that details security requirements, then use static analysis to verify that the policy is implemented in the code.

Validate Section 508 and WAI WCAG Web Accessibility Compliance , Parasoft White Paper - 477 KB PDF

Explains how Parasoft facilitates compliance with Section 508 and WAI WCAG web accessibility guidelines.

Establishing an Infrastructure for Productive Development , Java Developer's Journal

This article explains how five industry-standard practices reduce the amount of avoidable waste in the software development process, enabling developers to satisfy business goals without compromising their craft.

Quality Meets Speed - Producing Superior .NET Applications Fast

Learn how to prevent important classes of bugs with minimal effort, save time designing and writing unit tests, and streamline your code review process.

SOA Best Practices - Four Steps to Securing Your Web Services , SOA World Magazine

Details practices for ensuring Web service security throughout the SDLC.

Flow Analysis: Static Analysis on Steroids , Java Developer's Journal

Introduces the general concept and benefits of flow analysis, then demonstrates how flow analysis helps you find critical runtime bugs without executing code.

Strategies for Overlapping the Development of Embedded Systems Software and Hardware , ECN Magazine

Explores how to resolve most issues in the software's logic during desktop testing, significantly reducing the amount of time you need to spend testing the code on the target device.

Bulletproofing C++ Code , Dr.Dobb's Journal

Examines techniques that reduce the risks of errors when extending an existing code base, as well as improve the stability and quality of the project's evolving code base.

Is It Done Yet? Three steps to checking in your code with confidence , SOA World

Presents three steps to checking in your code with confidence.

JDJ Product Review — Parasoft Jtest 8.0 , Java Developer's Journal

"Jtest has matured with age and is getting like a fine wine now. There are facets that I discover every day that make me open my eyes and go, 'Wow!' It's a large complicated product, but for a large team it's essential."

Clean and Protect a Large .NET Code Base with Coding Standards and Unit Testing , .NET Developer's Journal

Explains a simple strategy that has proven to deliver fast and significant improvements to large and complex .NET code bases.

Jtest Aids Process , eWeek

"Developers, like astronauts, want to get quickly to the point of knowing whats really wrong with rapid further progress toward getting it fixed. Jtest 8 makes significant progress on both fronts. It offers more comprehensive tools for following a fault across the boundaries of a multimodule application, and it integrates useful aids to the process of code review and repair."

Jtest continues its trek toward code-testing supremacy , InfoWorld

"Jtest was already a great Java testing tool; now it's even better. Version 8 adds more pre-loaded rules and the new BugDetective analysis module for locating problems and identifying their origin. It takes on everything from unit tests to functional tests, and it does not limit your testing of any particular Java component."

Reducing the Risks of 64-bit Application Porting With Parasoft C++test and Parasoft Insure++ , Parasoft White Paper

Introduces the potential problems that could occur when you port applications to 64-bit processors and describes a practical strategy for preventing them.

Bulletproof .NET Code , .NET Developer's Journal

Introduces a simple four-step strategy that has been proven to make .NET code more reliable, more secure, and easier to maintain - as well as less likely to experience functionality problems.

A Small Shop's View of Jtest 8.0 , DevSource

"You don't need a large corporate development team to appreciate Parasoft's Jtest. Just a real application that needs to be debugged, that needs test cases generated, or needs a code review. Find out why our reviewer fell in love."

How to Implement and Automate Trolltech Qt Best Coding Practices with Parasoft C++test

Gain an introduction to the Qt framework and learn strategies for preventing and eliminating errors while developing on it.

Code Quality Improvement , Dr. Dobb's Journal

Samsung Electronics writes how C/C++test helped them improve code readability, produce consistent code, and prevent error-prone coding styles...

TransCore Case Study - 563 KB PDF

TransCore needed a cost-effective way to ensure the reliability of their Java-based toll-road payment collection systems. Learn how static analysis and unit testing helped them achieve this by exposing defects early when they could be resolved with minimal rework and added costs.

Enventive Case Study - 554 KB PDF

Most of Enventive's products must comply with a design for Six Sigma development process and meet a five nines (99.999%) reliability standard. Discover how Parasoft helped them move towards their goal of 100% crash-free code—and also implemented best practices that enable them to spend more time creating new capabilities.

United Guaranty Case Study - 580 KB PDF

Software defects were resulting in sporadic downtime for United Guaranty's applications, disrupting the business processes that relied on them. Learn how they established a continuous quality process that not only addressed these availability problems, but also saves them more than $400,000 annually.

Implementing .NET Coding Standards , Windows IT Pro

How .NET coding standards can prevent security gaps, functionality lapses, maintenance problems, and other quality issues.

Automated Coding Standards Analysis , Wrox Press

Provides a concise introduction to static code analysis for checking compliance to coding standards.

Hold the Line Against Application Attacks , Software Test & Performance

Presents the security best practices that should be integrated throughout the SDLC in order to "bake in" application security.

Removing Memory Errors from 64-Bit Platforms , Dr. Dobb's Journal

Explains why and how to address potential memory errors before porting to 64-bit platforms.

Insurance Services Office: QA Experience with Security Solutions

ISO QA manager Maria Conway shares her views on new technology and demonstrates leading edge solutions for ensuring application security, reliability, and compliance.

Jtest 7.0 passes with honors , InfoWorld

Parasoft Jtest 7.0 is like a Java code development assistant on a SoBe Adrenaline Rush intravenous drip. Not only does it do source analysis, perform coverage analysis, and manage unit test production, execution, and tracking, but now it provides on-the-fly generation of functional tests for everything from stand-alone applications to container-supported servlets and EJBs. In short, Jtest is becoming a one-stop-shopping Java-testing supercenter that copes with just about every Java component you might develop, regardless of its run-time requirements.

Product Review: Jtest 7.0 From Parasoft , Java Developer's Journal

"Jtest makes static code analysis a breeze and it should be easy for even beginners to analyze their code for compliance to standards as well as to generate unit tests."

BNSF Railway: Managing Change to Ensure Quality Software

Learn practices for maximizing change management techniques to produce reliable and robust applications.

Transcore: Reducing Risk in the Development Process

The leader in automated open road toll collection systems describes how they improved time to market predictability and contractual service level metric satisfaction by integrating unit testing and automated static code analysis into their Java development practice.

Lehman Brothers: Outsourcing & Code Quality Management

Learn how the adoption of unit testing and static code analysis allowed Lehman to control the quality of code delivered by outsourcers, enhance the productivity of its development staff, improve the overall reliability of its applications, and create consistent predictability of project release dates.

Prevention's the Cure , Software Development

Explains how static analysis can help you shift focus from finding bugs to building quality into the code.

Cleaning Up XML , XML Journal

Explains how to prevent poorly-written XML from slowing down an integration project–or causing it to collapse.

The Strange Inconsistency of Developers , SD Times

Argues that while love their code improvement books, they don't see any real reason to worry about the rules when coding.

Cutting the Crap: 7 Keys to Clean Up XML , Integration Developer News

Provides a checklist for cleaning up code that may have been auto-generated by a variety of tools.

Automated Error Prevention; Preventing Errors in Business Systems , WebSphere Journal

Explains how to prevent errors in business systems built upon WebSphere.

JUnit + Jtest = Automated Test Case Design and Static Analysis , DevX.com

Outlines how Jtest, an automated unit testing and static analysis tool, extends JUnit to provide automatic test case generation and static analysis functionality.

Verifying Web Site Accessibility , WebSphere Developer's Journal

Explains how to comply with Section 508 and W3C WAI mandates for making Web sites accessible to people with disabilities.

Techniques for Testing Your JavaServer Pages , EbizQ.net

Provides a handful of testing tips that should help you improve the reliability of your applications that use JSP.

Bulletproofing Web Applications

"Bulletproofing" is a road map for how to integrate error prevention and detection into the development process to ensure that Web applications are robust, scalable, efficient and reliable.

Techniques for Preventing and Detecting Errors in Embedded Systems , Dedicated Systems Magazine

Explains how error detection, and debugging techniques can dramatically improve embedded software quality and reduce the time and money spent on debugging.