Dr. Dobb's | The Truth About Software Security | January 20, 2007

[weld at vulnwatch.org (Chris Wysopal)]

Since I work at Veracode I won't pontificate on our service since I am
biased but I want to correct something in your posting.  Veracode is a
separate company from Symantec.  The technology was developed at @stake
and after Symantec acquired @stake the technology was purchased by
a new company, Veracode.

-Chris

On Tue, 30 Jan 2007, Kenneth Van Wyk wrote:

> FYI, there's an interesting article on ddj.com about a Symantec's new
> "Veracode" binary code analysis service.
>
> http://www.ddj.com/dept/security/196902326
>
> Among other things, the article says, "Veracode clients send a
> compiled version of the software they want analyzed over the Internet
> and within 72 hours receive a Web-based report explaining--and
> prioritizing--its security flaws."
>
> Any SC-Lers have any first-hand experience with Veracode that they're
> willing to share here?  Opinions?
>
> Cheers,
>
> Ken
> -----
> Kenneth R. van Wyk
> SC-L Moderator
> KRvW Associates, LLC
> http://www.KRvW.com