article thumbnail

#745 Managing the Risks of AI Generated Code with Matt van Itallie, Founder & CEO at Sema Software

Modern CTO

Today we’re talking to Matt van Itallie, Founder & CEO at Sema Software. We discuss the risks surrounding AI generated code, how to circumvent those risks with smarter software decisions, and we also get to catch up on life with Matt and Joel. To try Sema’s code monitor, click here. His motivation?

article thumbnail

Technology company M&A: Do due diligence on SDLC process/tools

Synopsys

Technical due diligence on the target’s SDLC is a must for acquirers in software M&A. The post Technology company M&A: Do due diligence on SDLC process/tools appeared first on Software Integrity Blog. What you don’t know about their process and tools could hurt you.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Things You Need To Know To Document the SDLC for Custom Software

Invid Group

Things You Need To Know To Document the SDLC for Custom Software BY: CARLOS FELICIANO-MISLA Documentation is a large part of any software project. Custom software needs quality custom documentation, especially concerning the development process and what happens at each step. Custom Software Will Have Milestones.

SDLC 52
article thumbnail

Static vs Dynamic Code Analysis: How to Choose Between Them

OverOps

What’s the difference between static and dynamic code analysis, and how do you know which to use? Static code analysis is analogous to practicing your baseball swing with a practice net and a pitching machine. Static Code Analysis. This is usually done by analyzing the code against a given set of rules or coding standards.

article thumbnail

Software Testing Methodologies: A QA Manager’s Guide

Openxcell

Software testing is no longer an isolated process and goes hand in hand with design and development. Delivering high-quality software is possible only if the entire team of developers, marketers, Quality Assurance engineers, and others collaborate and work together. What is Software Testing Methodology?

article thumbnail

Code signing: securing against supply chain vulnerabilities

CircleCI

This collection of agents and actors involved in the software development lifecycle (SDLC) is called the software supply chain. Because you are working with several moving parts — including open source material, APIs, and so on — it is crucial to know just how secure each component of your software supply chain is.

article thumbnail

Cybersecurity Snapshot: CISA Calls on Software Makers To Use Memory Safe Languages, as OpenSSF Issues Secure Software Principles

Tenable

Meanwhile, the OpenSSF published 10 key principles for secure software development. Cybersecurity and Infrastructure Security Agency (CISA) issued a clarion call for software makers to use so-called “memory safe” programming languages. VIDEO How can memory safe code stop hackers? And much more!