So, news has it long time code review tool vendor Ounce Labs have been acquired by big blue. This seems a timely acquisition by IBM as they are currently developing their String analysis technology which was shown to me last month, which if it works as well as envisaged shall be a great step forward.
It is yet to be seen what portions of Ounce shall remain and what shall be replaced by Appscan dev edition – Ounce shall be integrated/assimilated into the Rational suite which is shaping up to be a one-stop shop for Secure application dev (nice!!). This lends to the idiom of developers developing secure software and having the tools to do it. All we need now is some awareness and secure dev guidelines.
Post Tags: Application security industry, code review
