Welcome!

Microsoft Cloud Authors: Andreas Grabner, Stackify Blog, Liz McMillan, David H Deans, Automic Blog

Related Topics: Microsoft Cloud

Microsoft Cloud: Article

Static Analysis Helps Computer Company Prevent Software Errors

The "shift left" enables them to accelerate delivery while ensuring high reliability

Static Analysis Helps a Leading Computer Company Prevent Software Errors

A leading personal computer company is dedicated to adding market-differentiating software "preloads" to their systems, and wants to continue their trend of reducing field-reported defects for those preloads.

Working with Parasoft, industry leader in Development Testing and defect prevention, they have adopted a custom-tailored static analysis solution for eliminating defects early in the software development lifecycle. This "shift left" enables them to accelerate delivery while ensuring high reliability.

The Challenge: Preventing Critical, Yet Uncommon, Defects

To ensure a positive user experience, this company actively tracks and works to mitigate the number of field-reported crashes (monitored via Windows Error Reporting) associated with the software that they develop and preload on their systems. Based on their experience and research, the company's quality leaders were convinced that static analysis could help them prevent many of the crash-causing defects being reported. However, there was one problem: out of the box, none of the leading static analysis solutions (Parasoft included) caught the specific defects that were most common and important for their business.

Being able to deliver differentiating software preloads as rapidly and efficiently as possible is critical to this company's business. However, if defects are identified by QA (rather than development), considerably more time and resources are required to diagnose and eliminate each defect. This significantly impacts the velocity and predictability of their delivery cycles-an issue which is becoming increasingly critical as they transition from waterfall to Agile.

The Solution: A Custom-Tailored Static Analysis Solution

The company proposed that Parasoft partner with them to address this problem. They would share details about the defects that they most wanted to prevent-for example, defects related to accessing null pointers, memory violations, buffer overruns, out of bounds accessing, etc. Parasoft would then evolve the static analysis technology featured in its Development Testing Platform to prevent these types of defects.

This was a win-win situation. The company would gain the very specific technology needed to meet their strict quality needs, and Parasoft would be able to offer their expanded technology to the general market, as well as gain the opportunity to be integrated into the company's supply chain.

Other factors driving the selection of Parasoft included:

  • Strong support for a broad set of programming languages: The company uses C++, .NET (C#), as well as Java. Parasoft centralizes execution and reporting for static analysis across all of these languages.

  • Enterprise-grade support for centrally-managed rules across teams and projects: With a global workforce, analyzing code versus a uniform set of expectations is critical. Centralized management eliminates the opportunity for miscommunications or human error introducing inconsistencies into the analysis.

  • Workflow integration: One key reason why the company's previous static analysis initiative failed to achieve the desired result is that the solution was not integrated into the development workflow (developers had to review reports outside of their standard tools/process, so reported defects were not being addressed and resolved). Parasoft's open infrastructure allows seamless integration into the company's existing tools and process (e.g., execution via Continuous Integration and reporting via their bug-tracking system).

Next Steps: Tracking and Optimizing How Static Analysis Reduces Field-Reported Errors

This company expects that the solution will provide release management increased visibility into the risks associated with the applications being developed-enabling them to make more informed go/no-go decisions. Since Windows Error Reporting gives them a very reliable account of how many crashes are occurring in the field, they look forward to tracking which defect prevention efforts have the greatest business impact. They can then use this feedback to continuously improve towards their ultimate goal-accelerating the delivery of innovative preload software without compromising the reliability that their enterprise clients expect.

Once the Parasoft solution is fully "baked into" the process across their laptop PCs, the company plans to extend the Parasoft solution across the remainder of their product lines.

Down the road, the company anticipates making the solution a requirement for vendors within their supply chain. When a driver that is preloaded on one of their PCs fails, users are likely hold the company accountable for that failure. As part of their ongoing efforts to ensure a positive user experience, the company monitors these failures (also reported through Windows Error Reporting) and works with vendors to minimize them. If the company finds that the Parasoft solution can effectively prevent the crashes being reported for preloaded drivers, then they plan to require vendors to comply with their selected rule set as part of their partnership terms.

Static Analysis Webinar: Where Does Static Analysis Fit in "Continuous Everything"?

Modern software development strategies call for a staggering amount of process automation to reduce the injection of defects and to get to market faster. These strategies lean on continuous testing, continuous builds, and continuous delivery-in short, "continuous everything." But organizations seeking to enable continuous processes consistently hit two barriers:

  • Setting criteria for determining next-level readiness.

  • Evolving policy to meet the demands of continuous development.

Join the live Where Does Static Analysis Fit in "Continuous Everything"? Power Hour webinar on Thursday April 23 to explore the critical role that static analysis plays in enabling continuous testing, continuous builds, and continuous delivery-including how static analysis:

  • Serves as the backbone for automating quality gates that verify whether code is ready for downstream phases of development. 

  • Helps you prevent avoidable rework that impedes velocity.

More Stories By Cynthia Dunlop

Cynthia Dunlop, Lead Content Strategist/Writer at Tricentis, writes about software testing and the SDLC—specializing in continuous testing, functional/API testing, DevOps, Agile, and service virtualization. She has written articles for publications including SD Times, Stickyminds, InfoQ, ComputerWorld, IEEE Computer, and Dr. Dobb's Journal. She also co-authored and ghostwritten several books on software development and testing for Wiley and Wiley-IEEE Press. Dunlop holds a BA from UCLA and an MA from Washington State University.

@ThingsExpo Stories
SYS-CON Events announced today that CA Technologies has been named "Platinum Sponsor" of SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CA Technologies helps customers succeed in a future where every business - from apparel to energy - is being rewritten by software. From planning to development to management to security, CA creates software that fuels transformation for companies in the applic...
SYS-CON Events announced today that IBM has been named “Diamond Sponsor” of SYS-CON's 21st Cloud Expo, which will take place on October 31 through November 2nd 2017 at the Santa Clara Convention Center in Santa Clara, California.
In his session at Cloud Expo, Alan Winters, an entertainment executive/TV producer turned serial entrepreneur, presented a success story of an entrepreneur who has both suffered through and benefited from offshore development across multiple businesses: The smart choice, or how to select the right offshore development partner Warning signs, or how to minimize chances of making the wrong choice Collaboration, or how to establish the most effective work processes Budget control, or how to ma...
We build IoT infrastructure products - when you have to integrate different devices, different systems and cloud you have to build an application to do that but we eliminate the need to build an application. Our products can integrate any device, any system, any cloud regardless of protocol," explained Peter Jung, Chief Product Officer at Pulzze Systems, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA
SYS-CON Events announced today that Cloud Academy named "Bronze Sponsor" of 21st International Cloud Expo which will take place October 31 - November 2, 2017 at the Santa Clara Convention Center in Santa Clara, CA. Cloud Academy is the industry’s most innovative, vendor-neutral cloud technology training platform. Cloud Academy provides continuous learning solutions for individuals and enterprise teams for Amazon Web Services, Microsoft Azure, Google Cloud Platform, and the most popular cloud com...
With major technology companies and startups seriously embracing Cloud strategies, now is the perfect time to attend 21st Cloud Expo October 31 - November 2, 2017, at the Santa Clara Convention Center, CA, and June 12-14, 2018, at the Javits Center in New York City, NY, and learn what is going on, contribute to the discussions, and ensure that your enterprise is on the right path to Digital Transformation.
"When we talk about cloud without compromise what we're talking about is that when people think about 'I need the flexibility of the cloud' - it's the ability to create applications and run them in a cloud environment that's far more flexible,” explained Matthew Finnie, CTO of Interoute, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
In his session at @ThingsExpo, Eric Lachapelle, CEO of the Professional Evaluation and Certification Board (PECB), provided an overview of various initiatives to certify the security of connected devices and future trends in ensuring public trust of IoT. Eric Lachapelle is the Chief Executive Officer of the Professional Evaluation and Certification Board (PECB), an international certification body. His role is to help companies and individuals to achieve professional, accredited and worldwide re...
Amazon started as an online bookseller 20 years ago. Since then, it has evolved into a technology juggernaut that has disrupted multiple markets and industries and touches many aspects of our lives. It is a relentless technology and business model innovator driving disruption throughout numerous ecosystems. Amazon’s AWS revenues alone are approaching $16B a year making it one of the largest IT companies in the world. With dominant offerings in Cloud, IoT, eCommerce, Big Data, AI, Digital Assista...
When growing capacity and power in the data center, the architectural trade-offs between server scale-up vs. scale-out continue to be debated. Both approaches are valid: scale-out adds multiple, smaller servers running in a distributed computing model, while scale-up adds fewer, more powerful servers that are capable of running larger workloads. It’s worth noting that there are additional, unique advantages that scale-up architectures offer. One big advantage is large memory and compute capacity...
Internet of @ThingsExpo, taking place October 31 - November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 21st Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal and enterprise IT since the creation of the Worldwide Web more than 20 years ago. All major researchers estimate there will be tens of billions devic...
IoT solutions exploit operational data generated by Internet-connected smart “things” for the purpose of gaining operational insight and producing “better outcomes” (for example, create new business models, eliminate unscheduled maintenance, etc.). The explosive proliferation of IoT solutions will result in an exponential growth in the volume of IoT data, precipitating significant Information Governance issues: who owns the IoT data, what are the rights/duties of IoT solutions adopters towards t...
With the introduction of IoT and Smart Living in every aspect of our lives, one question has become relevant: What are the security implications? To answer this, first we have to look and explore the security models of the technologies that IoT is founded upon. In his session at @ThingsExpo, Nevi Kaja, a Research Engineer at Ford Motor Company, discussed some of the security challenges of the IoT infrastructure and related how these aspects impact Smart Living. The material was delivered interac...
No hype cycles or predictions of zillions of things here. IoT is big. You get it. You know your business and have great ideas for a business transformation strategy. What comes next? Time to make it happen. In his session at @ThingsExpo, Jay Mason, Associate Partner at M&S Consulting, presented a step-by-step plan to develop your technology implementation strategy. He discussed the evaluation of communication standards and IoT messaging protocols, data analytics considerations, edge-to-cloud tec...
The Internet giants are fully embracing AI. All the services they offer to their customers are aimed at drawing a map of the world with the data they get. The AIs from these companies are used to build disruptive approaches that cannot be used by established enterprises, which are threatened by these disruptions. However, most leaders underestimate the effect this will have on their businesses. In his session at 21st Cloud Expo, Rene Buest, Director Market Research & Technology Evangelism at Ara...
Artificial intelligence, machine learning, neural networks. We’re in the midst of a wave of excitement around AI such as hasn’t been seen for a few decades. But those previous periods of inflated expectations led to troughs of disappointment. Will this time be different? Most likely. Applications of AI such as predictive analytics are already decreasing costs and improving reliability of industrial machinery. Furthermore, the funding and research going into AI now comes from a wide range of com...
SYS-CON Events announced today that Enzu will exhibit at SYS-CON's 21st Int\ernational Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Enzu’s mission is to be the leading provider of enterprise cloud solutions worldwide. Enzu enables online businesses to use its IT infrastructure to their competitive advantage. By offering a suite of proven hosting and management services, Enzu wants companies to focus on the core of their ...
SYS-CON Events announced today that MobiDev, a client-oriented software development company, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software company that develops and delivers turn-key mobile apps, websites, web services, and complex software systems for startups and enterprises. Since 2009 it has grown from a small group of passionate engineers and business...
SYS-CON Events announced today that GrapeUp, the leading provider of rapid product development at the speed of business, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Grape Up is a software company, specialized in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market acr...
SYS-CON Events announced today that Ayehu will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on October 31 - November 2, 2017 at the Santa Clara Convention Center in Santa Clara California. Ayehu provides IT Process Automation & Orchestration solutions for IT and Security professionals to identify and resolve critical incidents and enable rapid containment, eradication, and recovery from cyber security breaches. Ayehu provides customers greater control over IT infras...