Give Some Modularity to Java

A BZ Media Publication SPECIAL REPORT ALM 2.0: Lots of ways in

page 26

MARCH 1, 2009 • ISSUE NO. 217 www.sdtimes.com • $9.95 ‘Profiles’ give some modularity to Java Workarounds trim platform until SE 7 arrives BY ALEX HANDY neer at Sun Microsystems and “The idea is that the profile gives For years, Java EE has taken its spec co-lead on Java EE 6 project a better way to drive the needs of lumps for being too big and JSR 316, said that profiles will a particular class of developers. bloated. When Java SE 7, the offer vendors and users a smaller, We ended up agreeing on the OpenJDK, eventually arrives, it friendlier Java EE. Currently definition of a Web profile, which Roberto Chinnici, senior engineer at W3C’s Dahl says that EMMA expands will bring modularity to the core there is only one profile in the is smaller than the whole plat- Sun, says that Java EE 6 provides a the range of inputs for devices. of the Java platform, allowing works: the Web profile. Simply form, but it’s essentially a subset. leaner work environment. users to prune unwanted ele- put, a profile is a slimmer Java It goes from presentation tech- ments of the environment before environment, bereft of old APIs nology like JSF to the core Web products that are built on profiles EMMA gives deployment. But despite rumors and libraries. Thus, the Web pro- API, which is a servlet API. It will have smaller footprint and to the contrary, no one is entirely file of Java EE 6 is specifically also has a business logic API like could even be used in embedded sure when Java SE 7 will be targeted at Web. EJB Lite and a persistence API.” environments. It gives more flexi- apps many ready. Until it is, the Java EE 6 “Profiles are bundles of tech- All that slimming makes the bility to vendors for what they team has workarounds, and nology taken from [components platform easier to handle, said want to provide,” he said. they’re calling them “profiles.” that are contained in] the full Chinnici. “It’s also a lot easier for Historically, Java EE has not Web inputs Roberto Chinnici, senior engi- platform,” Chinnici explained. people to learn. We imagine the continued on page 18 > BY DAVID WORTHINGTON Knowing that people no longer Sun realigns software access the Web solely via their PCs, the World Wide Web Con- sortium (W3C) has published a standard that it says will help in GlassFish Portfolio developers adapt their applications to different inputs modes Pushes open-source sofware in bundles on a variety of devices. BY ALEX HANDY based on levels of service and That standard is EMMA, the Over the past four years, Sun support. The first product, the Extensible MultiModal Annota- Microsystems has recast itself as GlassFish Web Stack is a snapshot tion. EMMA is a specification for a company focused on open of Apache Web server, MySQL Web applications to represent source. With open-source Java, and PHP that Sun will update and user input from different sources, Solaris, NetBeans and applica- support for US$999 per server effectively separating the logic tion server GlassFish, the com- per year. That stack, which also layer of applications from the pany has come up with a product includes Java EE, is supported on input layer. lineup to support that claim. either Linux or Solaris, and EMMA provides a single Last month, Sun expanded its according to Karen Tegan Padir, framework for representing user open-source offerings even fur- vice president of Sun’s MySQL Glassfish Enterprise Manager includes an application performance monitor. intent from different types of ther by releasing four GlassFish- and Software Infrastructure modalities, including hand ges- focused products based on pop- Group, the stack is designed to community, and there will be frozen stack you’re going to get tures, handwriting and natural ular open-source software. allow developers to write once for new packages, new features and once a year.” language, according to Deborah The additions that make up either operating system. new things we will add to it,” Pricing on the Web Stack also continued on page 25 > GlassFish Portfolio are priced “Things will evolve in the said Tegan Padir. “It’s not this continued on page 24 > IN THIS ISSUE XBRL comes to Altova ...... 7 IBM sets AppScan’s sights on Flash Sun brings JavaFX to mobile devices ...... 8 page 10 Mono Moonlight goes gold ...... 11 AVIcode takes business intelligence upstream ...... 15 O’BRIEN: Quality: You are gonna need it ...... 36 Seapine bolsters reporting, scalability in updates . . . . .18 BINSTOCK: The zealots of agile ...... 36 Elementool gives managers better handle on testing . . 23 GUEST VIEW: Lower-level encryption’s dirty secrets . . .38

www.sdtimes.com Software Development Times March 1, 2009 NEWS 5 WS02’s Carbon deepens footprint into SOA Uses OSGi specification to integrate its stack with model similar to Eclipse plug-ins BY DAVID WORTHINGTON IT, but they are knocking on its tle said. “The result is bloat, “IBM and BEA are current- interesting to see adoption,” WSO2, an open-source SOA door to get ESB help,” he said. cost and complexity—things ly more aggressive in consum- Governor said. “I think the real infrastructure software maker, “That is the issue we are not fitting well together. Cus- ing OSGi than exposing it in progress in composability will has released a platform of inte- addressing with Carbon.” tomers are spending time and their production environ- come in the next couple of grated middleware components That lack of flexibility that effort integrating not their own ments,” said Governor in his development rounds as they dri- called Carbon. Each compo- Fremantle alleges stems from applications, but their SOA Monkchips blog. “Nobody is ve OSGi throughout their entire nent in Carbon is built on the the nature of how many soft- stack.” talking about a WebSphere stack.” Governor noted that OSGi (Open Services Gateway ware makers assembled their An upcoming release of Ora- OSGi Edition for example. But WSO2 is a RedMonk client. Initiative) specification. respective SOA stacks. cle’s Fusion middleware will OSGi is underpinning some of Fremantle said that WSO2 OSGi implements a compo- Industry leaders, including have some support for OSGi, IBM and BEA’s most interest- has OSGi-based versions of its nent model for the Java Virtual IBM and Oracle, gained com- and IBM’s Lotus Expeditor has ing technologies.” Mashup Server and Data Ser- Machine to make Java more ponents of their SOA stack an OSGi-based programming WSO2 “has a good clean vices platform slated for later modular, explained WSO2 through acquisitions, Freman- model. open-source story, and it will be this year. T CTO Paul Fremantle. WSO2 uses OSGi to integrate its mid- ALL ACCESS PRICING dleware platform. Embarcadero Carbon consists of the WSO2 License Type Bronze Silver Gold Platinum Enterprise Service Bus (ESB) Workstation $2,250 $4,250 $6,250 $8,250 2.0, WSO2 Registry 2.0 and puts all its tools Network Named User $2,813 $5,313 $7,813 $10,313 WSO2 Web Services Applica- Network Concurrent $4,500 $8,500 $12,500 $16,500 tion Server 3.0. The stack also includes the new WSO2 Busi- G Includes premium support for one DBMS. Up to 4 additional DBMS platforms can be into one chest added, for a total of 5: Oracle, Microsoft SQL, Sybase, DB2 for LUW, and MySQL ness Process Server, which is based on Apache ODE (Orches- BY DAVID RUBINSTEIN Into this landscape comes Other Items (Workstation Pricing) tration Director Engine). Vendor lock-in. If you listened Embarcadero, fresh off its Annual Renewal $1,125 $1,700 $2,065 $2,475 WSO2 is making “extremely to small companies selling one acquisition of CodeGear and Each Add’l DBMS Plat $750 $1,500 $2,500 $3,000 rapid progress” in building out or two task-specific develop- the old Borland development its SOA stack, said RedMonk ment tools back in the day, this tools, with a plan to compete. “Rather than selling a US$12 streams into memory, not a full principal analyst James Gover- was the thing to most fear. If Under a new program called All wrench and a $13 screwdriver, install,” Liband said. “The nor. He observed that WSO2’s you bought a complete tool Access, announced in February, we’re saying, ‘Here’s our $29.95 source code can be on a drive, tooling in the information as a stack from a giant like IBM or Embarcadero is making its tool chest.’” or a server, or over the Web.” service space is a standout, and Microsoft, you’d be at their database and software develop- The “Instant On” feature cur- that the company is now trying mercy over things like pricing, ment tools available on-demand INSTANT ON rently works with older Embar- to drive into process composi- bug fixes and software updates, and for multiple platforms. One One of the highlights of All cadero tools, such as DB Artisan tion management. these small companies cried. license unlocks all the tools Access is the notion of “Instant and ER Studio, and it will be With OSGi underpinning it, Today, after years of consoli- Embarcadero sells, with all the On,” which lets users launch added to the CodeGear tools in a it’s easier for developers to dation have reduced the devel- programming and modeling and run the tools instantly, few months, Liband said. “grow with Carbon,” Fremantle opment tools market to but a languages, for all roles on a without an install—except a Embarcadero has created said. Developers can incremen- few players, it turns out the big development team, according thin client in which the tools four different licensing options, tally add components on top of vendors aren’t all bad, and their to Jan Liband, Embarcadero’s run. “You click on the product but each includes a year of services without having to rein- tools are pretty darn good. vice president of marketing. in the client, and it instantly maintenance, technical support stall the entire stack, similar to and full upgrades to the tools how the Eclipse foundation WHAT’S INSIDE included in that license. It also integrates plug-ins into its tool- BRONZE SILVER GOLD PLATINUM provides access to new tools ing, he explained. Rapid Application Delphi Professional Delphi Enterprise Delphi Architect Delphi Architect that might come out in that Consistency and integration Development C++ Builder Professional C++ Builder Enterprise C++ Builder Architect C++ Builder Architect year, “even if they weren’t in among components enables ser- Delphi Prism Professional Delphi Prism Enterprise Delphi Prism Enterprise Delphi Prism Enterprise the box when they signed on,” vice composability in SOA, Fre- Database Rapid SQL Standard Rapid SQL Professional Rapid SQL Professional Rapid SQL Professional Liband said. mantle said. Composability is Application Embarcadero Change Embarcadero Change Embarcadero Change Embarcadero Change Also, customers can keep the the concept that collections of Development Manager Standard Manager Professional Manager Professional Unlimited Manager Ultimate tools even if they don’t renew services can be assembled into DBArtisan Standard DBArtisan Professional DBArtisan Workbench the support license, but they composite services, and it is one Design ER/Studio Viewer ER/Studio Viewer ER/Studio Enterprise ER/Studio Enterprise would not have access to main- & Architecture ER/Studio Standard of the guiding design principles tenance, upgrades or new tools. ER/Studio Enterprise Portal ER/Studio Enterprise Portal ER/Studio Enterprise Portal ER/Studio Enterprise Portal of the SOA methodology. 1-Connection 1-Connection 1-Connection 1-Connection He added that the company will WSO2 will be releasing sev- ER/Studio MetaWizard ER/Studio MetaWizard ER/Studio MetaWizard still license its tools individually, eral different component packs Import Only Import & Export Import & Export so if a customer only wants to Embarcadero Schem a Examiner so that its customers can decide buy ER Studio, for example, he Embarcadero EA/Studio Embarcadero EA/Studio Embarcadero EA/Studio Embarcadero EA/Studio what component pattern they or she will be able to. want to use for creating ser- Performance Embarcadero DB Optimizer Embarcadero DB Optimizer Embarcadero DB Optimizer Embarcadero DB Optimizer Making the case for All & Tuning Standard Professional Professional Professional vices, Fremantle said. Every Embarcadero J Optimizer Embarcadero J Optimizer Embarcadero J Optimizer Embarcadero J Optimizer Access, Liband pointed to the Carbon component is managed Embarcadero Performance Embarcadero Performance economy and the mandates for through a single console. Center Client Center Client increased productivity from few- In contrast, most SOA infra- Web Development 3rdRail 3rdRail 3rdRail 3rdRail er people. “So people have to structure software has a ten- Delphi for PHP Delphi for PHP Delphi for PHP Delphi for PHP become proficient on a variety of dency to enforce architecture Databases InterBase SMP Server Edition InterBase SMP Server Edition InterBase SMP Server Edition InterBase SMP Server Edition mix-and-match platforms. It’s on the customer, Fremantle 5 user connections 10 user connections 25 user connections unlimited user connections hard to find single-platform said. “Many developers moved Java Development JBuilder Professional JBuilder Enterprise JBuilder Enterprise JBuilder Enterprise companies these days. There just to SOA to get away from central (includes UML Modeling) (includes UML Modeling) (includes UML Modeling) aren’t many pure plays left.” T Solutions for every world Visual Modeling for Business, IT and Systems Enterprise Architect from Sparx Systems redefines visual modeling with a huge set of built-in tools, technologies and capabilities, coupled with a lightweight footprint and great agility.

UML, SysML, XMI, CORBA, BPMN, DoDAF-MODAF, TOGAF, Zachman Framework, FEAF, WSDL, XML Schema, DDS, EJB, Eclipse, .Net, Actionscript, C, C++, C#, Java, Delphi, VB, PHP, Python, DDL, Requirements, Testing, Data Modeling, Debug and Profile, Mind Mapping, RTF & HTML Documentation, MDA Transforms, and more.

Visit: www.sparxsystems.com/everyworld

Advertising Communications Education Gaming IT Mining Retail Technology Aerospace Computing Electronics Geospatial Logistics Networking Science Telecommunications Automotive Consulting Embedded Government Manufacturing Pharmaceutical Security Transport Banking Defense Engineering Health Media Research Services Utilities Biomedical E-commerce Finance Insurance Medical Resources Software And more... With deep support for UML 2.1 and its related standards, Enterprise Architect 7.1 is the ideal tool to analyze, design, build and manage your next project. www.sdtimes.com Software Development Times March 1, 2009 NEWS 7

COMPANIES

Microsoft has announced that SQL Server 2008 and Windows Server 2008 now fully integrate with SAP NetWeaver 7.0 and the newly released SAP Business Suite. Microsoft executives said that this demonstrates the company’s commitment to delivering world-class enterprise capabilities through joint Microsoft and SAP development. NEW PRODUCTS

Gizmox, an Israel-based rich Internet application company, released the first commercial version of Visual WebGui Professional Studio. Visual WebGui, a Microsoft-only product that can be used on the .NET Framework, is installed locally and enables Windows-like desktop development. The application development and deployment tool targets users familiar with Windows Forms. UPDATES

Aonix is targeting PowerPC embedded systems running Wind River’s VxWorks real-time operating system with a new version of its ObjectAda application development software. ObjectAda 8.4 integrates with Wind River Workbench, an Eclipse-based MapForce Verison 2009 can map databases to XBRL taxonomies as an alternative to tagging reports. development environment, and gives users the option of utilizing ObjectAda’s standard graphical or command-line interface, according to company executives . . . Complex Event Processing software XBRL comes to Altova company Coral8 has released Coral8 Engine 5.6. Company executives said the new version lets customers access Coral8 managed Updates to MissionKit center around new XML standard data through third-party client tools that have interoperability with Windows Open Database Connectivity. It also can more easily BY DAVID WORTHINGTON taxonomy editor for creating Other improvements added integrate with Microsoft .NET applications via a richer Microsoft Altova has updated MissionKit XBRL-based filings, and Map- to the suite include functionali- .NET SDK . . . DevExpress, a creator of .NET and ASP.NET products, 2009, a suite of database, UML Force derives XBRL from ty for working with the Health has made its software interoperable with Microsoft’s ASP.NET and XML tools. In addition to accounting data to produce Level 7 (HL7) standard in Dynamic Data, a framework for building data-driven applications. that, Altova has added Extensi- reports. MapForce, new database dif- Company executives said that using DevExpress’ ASPxGridView ble Business Reporting Lan- Taxonomies in XBRL pro- ferencing capabilities in Data- data grid can help developers create more options and capabilities guage (XBRL) support across vide a set of tags that represent baseSpy and DiffDog, and to end users . . . Java and Java EE development tool maker its products. Generally Accepted Account- sequence diagram generation Genuitec has opened its catalog of Eclipse plug-ins to all MissionKit is comprised of ing Principles for financial in UModel. users in a new version of its Pulse software configuration manage- new versions of Altova’s Data- reporting. MapForce supports HL7 in ment product for Eclipse. Previously, the full catalog was only baseSpy query and design tool, “Our approach [with Map- anticipation of the new U.S. available to paying users of the product, but now developers using DiffDog merge utility, Map- Force] is a little different than Presidential Administration’s Pulse Community Edition, a free version of the tool, have complete Force data mapping tool, Style- standard XBRL tools,” which “huge push” to automate access to it as well. Pulse 2.4 offers customizable tool stacks Vision graphical stylesheet tag financial reports as an healthcare records, said Falk. It made from the catalog, along with the ability to manage multiple design utility, UModel Unified afterthought, Falk said. “That implements HL7 version 3.0 environments . . . Digital imaging company Pegasus Imaging Modeling Language tool, and is fundamentally the wrong and its previous Electronic has added the ability to create PDF/A files to its SDK for building XMLSpy XML editor. approach. Database Interchange-based Out of those products, Map- “Organizations have all their versions. document management applications. PDF Xpress 3, which is avail- Force, StyleVision and XML- accounting data stored … Why DatabaseSpy and DiffDog able as both a .NET SDK and an ActiveX SDK, also lets developers Spy offer support for the view- not take that and directly derive are now capable of comparing add watermarks to PDF documents, using either a text string or a ing, editing, validating, XBRL from it, and then gener- and merging database content; PDF page containing combinations of images and text, according to mapping and publishing of ate the report?” he posited. individual tables or multiple the company . . . Quest Software created a new XBRL data. “Inherently, the tagging of database tables within a version of its desktop-based monitoring and diagnostics tool, XBRL is an emerging XML- existing files as an afterthought schema can be compared Spotlight on Oracle. The new version has a feature called predic- based standard to define and is labor intensive, even if tools regardless of the kinds of data- tive diagnostics, which identifies potential bottlenecks in database exchange business and finan- automate part of it.” base they are. Differences can performance, according to the company. Spotlight on Oracle now cial performance information, He said that Altova also be merged implicitly, said brings new archiving features, raising alerts when an archive desti- and XBRL International, a adjusted how StyleVision Falk, who added that compar- nation or an archive process fails, and giving information on archive not-for-profit consortium, gov- designs tables for the presen- ing database content can be an activity and health. erns it. Governments, includ- tation of XBRL data. It can effective way to figure out why ing the United States, have output the reports into an application may be able to PEOPLE mandated its use for corporate HTML, PDF, RTF and Word work in a staging environment filings. 2007 (Office Open XML) for- but not in a production envi- Andi Gutmans has been named new CEO of Zend Technologies, a PHP Altova’s objective is to pro- mats. ronment. development product provider. Gutmans, who co-founded the compa- vide developers and database All of Altova’s products now Lastly, the sequence dia- ny, was most recently senior vice president for research and develop- administrators with tools to support the XLink and XPoint- gramming feature in UModel ment at Zend, as well as CTO. The company also named Mark Burton, work with XBRL data from var- er languages for creating permits developers reverse formerly executive vice president of worldwide sales at MySQL, as ious angles, said Alexander hyperlinks in XML documents engineer source code that is executive chairman. Harold Goldberg, who was Zend’s CEO over the Falk, president and CEO of as a consequence of supporting written in C#, Java or Visual past two years, is leaving to pursue other opportunities, according to Altova. XMLSpy has a visual XBRL, Falk noted. Basic. T the company. T 8 NEWS Software Development Times March 1, 2009 www.sdtimes.com Sun brings JavaFX to mobile devices BY JEFF FEINMAN February, is built on a Java that JavaFX Mobile has the phone is now opening up to and capabilities with JavaFX Sun Microsystems has made ME (Micro Edition) platform same APIs, code and function- them because they don’t have Mobile. They have access to available a mobile development implementation and, in most ality as its desktop brethren. to learn a new mobile-specific Java ME’s file systems, address platform for creating rich Inter- cases, has the same features as “The great thing about this way of creating content,” books, Bluetooth, camera, and net applications (RIAs) and the desktop version of JavaFX. is, for developers that have Lehrbaum said. location sensors. Additionally, other rich content. Jacob Lehrbaum, a senior prod- already been looking at JavaFX Developers can use existing developers can use existing Java JavaFX Mobile, announced in uct line manager at Sun, said on the desktop, the mobile Java ME mobile applications libraries in JavaFX Mobile applications. Jim Weaver, a senior vice president of technology for digital media provider Veriana Networks and author of his own JavaFX blog, praised JavaFX Mobile’s ability to run as an applet in the browser, on the desktop and on mobile phones. “This makes it easier to support various phones with the same applications, because JavaFX Mobile runs on top of Java ME, which is very prevalent on phones today,” Weaver said. “Not only does JavaFX have UI capabilities, it also has a communication API that is common to all platforms, which makes it very conducive to running enterprise applications from mobile phones.” JavaFX, which was made generally available in early STUDIO FOR SILVERLIGHT December 2008, offers audio, STOCK PORTFOLIO DEMO STUDIO FOR IPHONE video, rich text, vector graphics, CTP NOW AVAILABLE animation and Web services for mobile and desktop applica- Studio for Silverlight tions through what Lehrbaum Produce limitless RIAs: state-of-the-art Silverlight controls called a very simple scripting • Find the Silverlight 2 control you need to build rich language. data apps: largest selection of Silverlight controls “As opposed to Java where including unique controls like animated GIFs, spell- you build things out program- checking, file uploader, and more Studio Enterprise 2008 v3 delivers matically and from the ground • Increase functionality with a small footprint: exactly what you need to produce up, JavaFX has a lot of prede- average control size of 77KB (XAP size) eliminates the fined behaviors and a default need to worry about adding to the size of the download next-generation UIs for the Web. way to do animation,” Lehrbaum • Access the best resources: 15+ samples with source said. “If you want to do layout, code for quick learning there are better ways of doing that in JavaFX, which is much more similar to how people Studio for ASP.NET have been creating content for AJAX-enabled controls for desktop-like experience on the Web the Web.” • Build lightweight, high-performance Web apps: JavaFX Mobile is available 3x smaller footprint, 10x faster performance on more than 2.6 billion mobile • Style and animate your Web UI without coding: phones, the company claimed. dozens of built-in visual styles & animation effects Developers can build JavaFX applications on mobile devices Studio for iPhone by downloading the JavaFX SDK at www.javafx.com. Build Web apps that look and feel like the native UI of the iPhone and iPod touch Sun executives said that sev- • Develop without the hassle of learning a new GET STARTED TODAY DOWNLOAD YOUR FREE TRIAL @ eral leading handset manufac- technology: Studio for iPhone controls are built on componentone.com/amazingweb turers, service providers and the familiar ASP.NET Framework ISVs are working with Sun to ship JavaFX Mobile handsets. Grids • Charting • Reporting • Scheduling • Menus and Toolbars • Ribbon • Data Input • Editors • PDF Among those companies are Sony Ericsson and RIA WinForms • WPF • ASP.NET • Silverlight • iPhone • Mobile • ActiveX providers Cynergy Systems, EffectiveUI, and Nexaweb. ComponentOne Sales 1.800.858.2739 or 1.412.681.4343 Sun was expected to pre- © 1987-2009 ComponentOne. All rights reserved. iPhone and iPod are trademarks of Apple Inc. All product and brand names are trademarks and/or registered trademarks of their respective holders. miere JavaFX Mobile at Mobile World Congress in Barcelona, Spain, held Feb. 16–19. T [ [ 10 NEWS Software Development Times March 1, 2009 www.sdtimes.com

ware, according to IBM. Wei- der explained that Rational IBM sets AppScan sights on Flash Quality Manager is a product for organizing test planning BY JEFF FEINMAN testing in development as you “Those are some of the major Rational Quality Manager to and test execution for quality IBM is trying to evolve its Web write the code with AppScan ways that application security is build security and compliance assurance functions, and the application-scanning product to Developer Edition, or you being embedded into the soft- into the development and goal is to integrate security as a cater to Adobe Flash and other could be testing in the quality ware development life cycle.” delivery phase. This helps different test type within the Web 2.0 applications. assurance phase using our AppScan Tester Edition can companies save money by not Rational Quality Manager The company released last Tester Edition,” Weider said. now also be plugged into using poor, bug-ridden soft- umbrella. T month a new version of App- Scan Standard Edition that it says tests rich, Flash-based Web content and applications. IBM executives explained that as people use more collaborative capabilities in their professional technology, they are susceptible to a greater risk of security vulnerabilities. IBM Rational App- Scan can now test Web 2.0- based applications for security threats by scanning Web content before deployment. “Flash applications are becoming not only ubiquitous, but they’re moving from being more animation-oriented applications to being real applications that are collecting data and doing more sophisticated things,” said Mike Weider, director of security solutions of IBM Rational. “So the security risk as we move from that animation focus to an actual rich Internet application exposes the site owner to a lot more risk in terms of potential security issues.” In addition to Flash, the new version of AppScan Stan- dard Edition can also scan applications built with AJAX technology and SOA applications. Weider explained that IBM scans the Flash content by emulating the execution of the Flash application. AppScan then attacks the content with its security vulnerability assessment engine to find weakness- es in the application, and it reports those findings back to the user. As part of the update, App- Scan On Demand, a software- as-a-service version of the product, has been given new production monitoring capabilities that alert developers to vulnerabilities as they happen. The product sends security alerts to mobile devices. IBM said this can be especially critical for organizations that make changes to their websites on a regular basis. For instance, a company that updates its website every 15 minutes can automatically scan their online application four times per hour. “We provide a layered defense where you could be www.sdtimes.com Software Development Times March 1, 2009 NEWS 11

was delayed, Miguel de Icaza, vice president of developer Mono Moonlight goes gold platforms for Novell and leader of the Mono project, said that BY DAVID WORTHINGTON Moonlight 1.0 generally avail- Library General Public License. with the release of Silverlight the delay was caused by “logis- Moonlight, an open-source able for Linux distributions, Moonlight’s source code was 2.0. A preview version was tics on getting the media codecs implementation of Microsoft’s including Fedora, OpenSUSE, published in May while it was released earlier this month for ported, signed and distributed.” Silverlight runtime for Linux, Red Hat, SUSE Linux Enter- still in beta. streaming the U.S. Presidential Microsoft does not directly has reached its first milestone. prise and Ubuntu. Moonlight Its final release was original- inauguration. support Moonlight, but it has The Mono team has made 1.0 is licensed under the GNU ly slated for August to coincide When asked why its release nurtured its development by contributing its technical guidance to the project. Novell will handle all Moonlight support requests. Microsoft has supplied Nov- ell with test suites for the Com- mon Language Runtime, Microsoft’s implementation of the Common Language Infra- structure standard, to create Moonlight. Microsoft has also open-sourced high-level pieces of Silverlight 2 under the Microsoft Public License. “Without those controls, it would have taken years for us to catch up with Microsoft,” de Icaza noted in his blog. Microsoft has also granted the Mono team access to the Microsoft Media Pack, a set of licensed media codecs for video and audio. The codecs support decoding for Windows Media Video, Windows Media Audio and MP3 files. As an alternative, Developers may compile FFmpeg codecs themselves. FFmpeg is an open- source tool for audio and video conversion. “We have worked with the Moonlight team and Novell to enable interoperability between Windows and Linux platforms, and [to] extend the high-quality interactive Web and video experience for the benefit of the Lin- ux community,” said Scott Guthrie, corporate vice president of the .NET Developer Division at Microsoft. Now that it has reached pari- ty with Silverlight 1.0, the Mono team is focused on delivering Moonlight 2, which is based on Silverlight 2.0. The source code for an early build is available on the project’s website. Microsoft is continuing to help the project along, wrote de Icaza in his blog. De Icaza said that Moon- light development would continue through Silverlight 3.0, which Microsoft is expected to announce at its MIX conference in Las Vegas this month. Silverlight 3.0 will include additional controls, an editable and interactive designer for Visual Studio and Visual Web Devel- oper Express, and richer data- binding support, according to Microsoft. T 12 NEWS Software Development Times March 1, 2009 www.sdtimes.com SemmleCode scans Eclipse for bugs Glitch finder includes simple query language for asking questions of code BY ALEX HANDY programming and refactoring False positives are the bane of as well. all code scanners. But Semm- “The idea here is that you le, a small company and tool take the entire source of a soft- that has emerged from ware system and store it in a research at Oxford University, relational format,” said de is betting that a simple query Moor. “Then you do analysis. language can take the sting out The kinds of things you can of code scanners. The compa- compute are all the usual quali- ny has released SemmleCode, ty matrices. It finds typical an Eclipse plug-in that brings bugs, unmarked dependencies Semmle offers numerous ways to visualize the data it gathers when scanning source code and binaries. bug-scanning capabilities into and all these things.” the open-source IDE. De Moor said that Semmle- characteristics of your own SemmleCode can scan Java Aside from adding more lan- Oege de Moor, CEO of Code is “similar to FindBugs codebase,” said de Moor. and XML files, but de Moor guages, de Moor said that Semmle, said that Semmle- … But with [FindBugs] you “These queries are written in said that new languages, such SemmleCode should gain new Code can ferret out many cod- have to be an expert. Tweaking an object-oriented query lan- as C++, will be added over report and graphical capabili- ing issues within Eclipse. The analysis is really difficult.” But guage, .QL. It’s a modern vari- time. ties in future releases. tool was originally developed de Moor said that Semmle- ant of a query language called “These days, if you have a “We always get more in Oxford University’s comput- Code includes a simpler Datalog. It makes it possible to big Java project, it’s using requests for different ways of er science department, where object-oriented query lan- phrase the queries in familiar Spring, [and there are] lots of visualizing. You can look at the de Moor is a professor. guage that can make tweaking terms.” configuration files. If you want results as heat maps or as prob- De Moor also belongs to a and customizing code searches SemmleCode costs US$499 to talk about dependencies, you lems in the Eclipse problems programming tools research easier. per user, and it is targeted at have to check XML. But the view. But people always want team at the university, and he “If you get false positives, both Eclipse usersw and soft- technology is not tied to Java,” more ways of visualizing it,” focuses on aspect-oriented it’s typically because of the ware consultants. Currently, said de Moor. said de Moor. T

Create any document from any application... Increase Productivity! Illuminate SharePoint Out-of-the-box DataGrid, Chart, and Map Web Parts

® LEADTOOLS ePrint is the total solution for businesses ComponentOne's SharePoint Web parts, leveraging the power needing fast, reliable PDF, DOC, JPG, TIFF, HTML (and 140+ PRUH IRPDWV FUHDWLRQ DQG FRQYHUVLRQ JLYLQJ XVHUV ÀH[LEOH of Microsoft Silverlight, bring you superior performance, RSWLRQV WR VDYH SULQW HPDLO RU FRPELQH WKHLU ¿OHV styling, animation, and interactivity with no coding required. Build rich data visualization into your Microsoft Office H3ULQW OHDGV WKH ZD\ LQ SULQW FDSWXUH DQG ¿OH FRQYHUVLRQ XWLOLWLHV offering a full featured solution for the professional user, while SharePoint Server 2007 and Windows SharePoint Services 3.0 maintaining its ease of use for those only needing to save to PDF sites using these feature-packed, easily configurable Web parts. RU VLPSOH ¿OH FRQYHUVLRQ

3HUIHFW IRU WRGD\¶V IDVWSDFHG RI¿FH HQYLURQPHQW H3ULQW FDQ FRQYHUW \RXU GRFXPHQWV VDYH WKH ¿OH WR \RXU FRPSXWHU RU DOWNLOAD FREE TRIALS at www.componentone.com/webparts 6KDUH3RLQW SULQW WR PXOWLSOH SULQWHUV DURXQG WKH RI¿FH DQG HPDLO WKH ¿OH DOO DW WKH VDPH WLPH

*R WR HSULQWGULYHUFRP IRU PRUH LQIRUPDWLRQ RU WR GRZQORDG \RXU free evaluation WRGD\

www.eprintdriver.com (800) 637-1835 ComponentOne Sales 1.800.858.2739 or 1.412.681.4343 © 1987-2009 ComponentOne. All rights reserved. All product and brand names are trademarks and/or registered trademarks of their respective holders. Perforce The Fast Software Configuration Management System

Perforce Technical Support Fast Turnarounds. Precise Answers.

Our global support teams are always available to share their expertise in person – no scripted responses, answering services, or dispatch centers. At Perforce Software, our highly experienced technical support engineers take pride in providing fast turnarounds with precise answers.

Keeping your projects on track requires a support team that is ready to help right when you need it. You can count on Perforce’s Fast SCM System and legendary technical support to give you the winning advantage.

Download a free copy of Perforce, no questions asked, from www.perforce.com. Free technical support is available throughout your evaluation.

All trademarks and registered trademarks are property of their respective owners. 14 NEWS Software Development Times March 1, 2009 www.sdtimes.com

actions among services differ- Fiorano’s SOA platform keeps services independent ently than traditional ESBs, Bloomberg said. BY DAVID WORTHINGTON ary. It adds a what the company When services pass from one “that’s not really a service-orient- “Fiorano treats messages Fiorano has updated its plat- calls “event process life-cycle service environment to another, ed approach. Abstracting that between services as events,” form to keep services indepen- management,” the ability for the underlying execution envi- out makes services more inde- Bloomberg explained, whereas dent from execution environ- developers to attach attributes ronment often manages the pendent.” most ESBs use a Business ments. to components as business process state, explained Zap- The Fiorano platform differs Process Execution Language Fiorano released version 9.0 processes move between envi- Think managing partner Jason from other ESBs because it is (BPEL) engine to coordinate of its SOA platform in Febru- ronments, said CEO Atul Saini. Bloomberg. But, he added, message-driven and supports services, he added. That architecture creates the problem that Fiorano is attempting to solve. “There is an issue with BPEL engines not dealing well with services that aren’t running in their local execution environment,” Bloomberg said. “With a message-driven approach, you don’t have that problem.” Fiorano also has rewritten its entire development studio in Eclipse. “Fiorano is not just a Java development product,” said Saini. “The server is written in Java, but services and components can be written in C, C++, C# and Java.” Plug-ins for Microsoft Visual Studio and other .NET languages will be out by this summer, he added. T KRUGLE GOES TO ARAGON BY ALEX HANDY Source code search engine startup Krugle won’t be searching for new venture capital anymore. The two-year-old company was acquired by software outsourcing firm Aragon Con- sulting Group. Mel Badgett, formerly of Krugle and now vice president of marketing at Aragon, said that the acquisition will not affect the publicly available online code search engine hosted at Krugle.org. This free search engine was the original heart of Krugle, though it has since expanded into enterprise search tools. Those tools were the primary reason for the acquisition, said Badgett. “Aragon had used Krugle in the past and used the Krugle enterprise product. They thought Krugle would be a great addition to their software development services,” said Badgett. The deal had been in the works since December; terms of the transaction were not disclosed. For existing Krugle customers, Badgett said that it will be “business as usual. I think you’ll see changes to Krugle Enterprise, specifically in the area of code analytics.” T www.sdtimes.com Software Development Times March 1, 2009 NEWS 15 AVIcode takes business intel upstream BY DAVID RUBINSTEIN not only manage their own guilty,” he said. This information allows man- other business-intelligence AVIcode is floating its business application components, but Advisor can be used to agers to press for better ser- reporting tools is “the level of information ship upstream also those of their outside determine, for instance, that vice and keep the application actionable information, and the with the recent release of providers. “Unless you have 70% of an application’s prob- running at or near optimum ability to translate that informa- Advisor, created to provide solid data that your failure is lems are related to outside ser- performance. tion into data for decisions executive-level analysis of how [the service provider’s] failure, vice agreements, while 30% Zakonov said that what regarding application quality applications are performing you’re the one who’s always are internal, Zakonov said. makes AVIcode different from and resource utilization.” T and making it actionable. The company had already developed Intercept Studio, a tool for capturing data about an application’s topology as well as its internal and external dependencies. Advisor takes that application performance data and adds extensive reporting functionality to give executives a detailed quality assessment of application performance. “It’s not just for managing line-of-business applications, but now it’s about making decisions about improving quality based on the more sophisticated data analysis,” explained Alex Zakonov, AVIcode’s chief architect. He went on to say that at the executive level, Advisor can be used for quarterly or monthly reviews for keeping tabs on the quality of services being delivered. Lower-level managers can drill down to monitor and maintain an application’s health based on that more detailed information. From there, Advisor also provides visibility into the Intercept Studio performance data so that the appropriate department—development, IT or QA—can be given actionable information to resolve problems. Advisor sells for US$79.95. Zakonov said AVIcode software relies on establishing a solid baseline of behavior, based on such things as CPU and memory utilization, I/O speeds, application request time, activity time and load trends. This enables managers to assess their resource utilization and react when spikes occur in certain areas. These performance indicators also allow organizations to plan for such things as seasonal spikes, as they would for a retailer or a sports team. The trend to service-oriented architectures has led to applications that are more complex and more interdepen- dent than in the past. Applica- tion performance monitoring then was “nice to have, but now it’s a must-have,” Zakonov said. Now, organizations must 16 NEWS Software Development Times March 1, 2009 www.sdtimes.com

sorting and summary computa- Grid control works with ASP.NET Dynamic Data tions to ASP.NET applications. “Dynamic Data looks like BY DAVID WORTHINGTON Dynamic Data enables instructional videos online for object-relational mapping that technology that Microsoft will Component maker Developer developers to build applications customers. provides developers with anoth- continue to enhance,” said Express has introduced a wrap- based on a LINQ to SQL or LINQ to SQL is a LINQ er layer of abstraction between Julian Bucknall, CTO of Dev- per for its ASP.NET grid con- LINQ to ADO.NET Entity (Language Integrated Query) themselves and databases. Express. trol that enables it to work with Framework data model. Devel- provider made exclusively for The Dynamic Data frame- While Bucknall believes that Microsoft’s Dynamic Data oper Express has provided sup- Microsoft SQL Server, whereas work also enables developers to the Entity Framework is viable, framework. plementary source code and the entity framework does add data grouping, filtering, he feels that Microsoft’s ADO.NET team is no longer interested in developing the LINQ to SQL provider. The LINQ to SQL provider is limited to SQL Server and was initially created by the C# product team, he explained. “Many different divisions at Microsoft are writing .NET frameworks,” he said. “Cus- tomers are wondering whether these separate technologies are just experiments or for real.” T JADELIQUID GIVES TESTERS VIEW INTO BROWSERS BY ALEX HANDY Web application testing tends to be a black-box affair. Test tool projects like Selenium feed information into a browser, then offer up the output as evi- dence of success or failure. JadeLiquid Software, an Aus- tralian test tools company, has released a tool set that can peer deeper into the inner workings of browsers, yielding more information on test results. The three varieties of Liq- uidTest hook into the internals of Firefox and Internet Explor- er, giving the software a better way than simply analyzing output to determine why things aren’t working during a test bat- tery, said Duncan Thomas, vice Get ready for… president of JadeLiquid. LiquidTest Server Edition is the continuous integration the all-in-one .Net toolbox component of the LiquidTest suite. It can push Web applica- One vendor. The Telerik quality. The Telerik support. tion tests into the standard test barrage fired at new builds. Testers build those tests in LiquidTest Tester Edition. Outputted tests can be trig- gered in the continuous integration server and coordinated with Ant if they’re being used on Java applications. LiquidTest can also be used to test C#, Groovy and Ruby Web apps. www.telerik.com LiquidTest Developer Edi- tion creates functional tests that are integrated into code as unit US Sales: +1.888.365.2779 t Germany Sales: +49.89.8780687.70 t Europe HQ: +359.2.80.99.850 t e-mail: [email protected] tests. In addition, both Liq- uidTest editions can be used to * Telerik WebUI Test Studio and WinUI Test Studio include Automation Design Canvas software, owned and developed by ArtOfTest, Inc. create acceptance tests and can record actions for playback. T P

New NetAdvantage for Silverlight Data Visualization Makes Business Intelligence Possible for Every Business

learn more at: infragistics.com Infragistics Sales 800 231 8588 Infragistics Europe Sales +44 (0) 800 298 9055

mapping charts gauges zoombar timeline & more!

Copyright 1996-2009 Infragistics, Inc. All rights reserved. Infragistics, the Infragistics logo and NetAdvantage are registered trademarks of Infragistics, Inc. All other trademarks or registered trademarks are the respective property of their owners. 18 NEWS Software Development Times March 1, 2009 www.sdtimes.com Seapine bolsters reporting, scalability in updates Reporting features, larger teams highlight TestTrack Studio 2009 and Surround SCM 2009 BY JEFF FEINMAN tap that expertise and still have data with those databases, and In updates to a pair of products, access to the TestTrack data,” Seapine said that there will be Seapine Software has bolstered said Paula Rome, a senior prod- interoperability with other data- reporting services and their uct manager with Seapine. bases in future releases. ability to scale to larger teams. “The sky’s the limit in terms of Another feature in Surround In February, the ALM com- what kind of reporting they’re SCM 2009 is improved labels pany rolled out new versions of gonna want to do.” for change control and easier its TestTrack Studio test plan- TestTrack Studio 2009 lets build management. “Labels are ning and tracking software, and users remotely run and view something we’ve had in the of its Surround SCM software reports without logging into product, but we’ve beefed them configuration management. TestTrack. Also, automatic client up primarily so customers have Among the enhancements to upgrades make it easier for the widest scope of flexibility in reporting is the ability to view administrators to deploy to a using the product,” said Jeff reports created by external user’s computer, Rome said. Amfahr, Seapine’s product sources, including SQL Server Surround SCM 2009 can manager for Surround SCM. Reporting Services and SAP’s now work with relational data- “Unlike a lot of the depart- Crystal Reports. A grouped data base management systems in ment-level systems that really report feature lets users generate the back end, which Seapine force customers into a workflow reports with charts of grouped said makes the product more or process—‘You can’t use this,’ data and columns. Additionally, suitable for large organizations. or, ‘You have to use it this administrators can limit report This capability gives administra- way’—we want to make sure access to specific groups. tors more control over where people can use the product in TestTrack Studio lets users view reports created from external services. “With this external reporting databases are stored and how the way they want to.” plug-in framework, folks with they’re managed and backed up. Surround SCM 2009 has new Beans 6.1; and Eclipse on Mac to Seapine. Amfahr said this can an existing SQL Server report- The new version integrates with third-party integrations with OS X. Automatic server cache save time in marking sets of ing shop or whatever reporting PostgreSQL and SQL Server so Araxis’ Merge file comparison management helps improve branches to be cached on the service they’ve got in place can developers can manage their and merging software; Net- server memory usage, according server. T

be done very carefully.” Java EE 6 uses ‘profiles’ for modularity So while JSR 299 will add these capabilities, Chinnici insin- uated that this will be an area of < continued from page 1 comers is JAX-RS, the RESTful continual refinement over time. been known for its slim figure, Web API that was completed in JSRs IN JAVA EE 6 The Java EE 6 team is also said Andrew Binstock, principal late 2007. Java EE 6 will include a host of new JSRs as well as updates to working to make life easier for analyst at Pacific Data Works “In this case, you actually old favorites. Below is a list of all the components slated to be those who use Web frameworks. and an SD Times columnist. have many implementations [of included with Java EE 6. “The other thing we are doing in “Not only is there a lot in Java JAX-RS] competing with each the servlets package is effective- EE, which makes it a really other,” said Sun’s Chinnici. “We Newcomers JSRs not receiving ly adding a plugability API,” he robust enterprise platform, but are seeing good feedback from G JSR-196 Java Authentication SPI for attention, updates or said. “You can now drop a library Containers prior to Java EE 5, there was developers. It found the middle removal in Java EE 6 JAR file in your application and JSR-236 Timer for Application Servers the correct perception that it ground. G G JSR-168 Portlet Specification have that library automatically G JSR-237 Work Manager for Application represented a truly monolithic “I think there was a pent-up G JSR-170 Content Repository for Java register a set of endpoints with Servers technology API hull,” he said. need for an API focused on JSR-299 Web Beans the container, so you can physi- G G JSR-207 Process Definition for Java “People just needed the HTTP and the Web protocols. JSR-311 JAX-RS: Java API for RESTful cally use a Web framework with- G G JSR-208 Java Business Integration servlet engine, so they more and Now that we’ve created one Web Services (JBI) out having to do any manual more moved to Apache Tomcat with enough extensibility that Returning Technologies G JSR-225 XQuery API for Java (XQJ) configuration. The framework and used JDBC to do the data- you can build on top of it, I have G JSR-235 Service Data Objects will just register itself. G Enterprise JavaBeans base back end, and [they] wired high hopes going forward.” G JSR-286 Portlet Specification 2.0 “You can use this with script- G Java Persistence API them together with some kind of While JAX-RS is entirely new G JSR-289 SIP Servlet v1.1 ing languages. Using Rails G Servlets Java Web framework.” to the Java EE platform, other JavaServer Faces G JSR-301 Portlet Bridge Specification becomes as easy as dropping G for JavaServer Faces Binstock was supportive of technologies, such as Enterprise G JAX-WS this JAR in your application. It the new Web profile. “Other Java Beans and the Java Persis- G Java EE Connector API lowers the barrier to scripting than enterprise data processing tence API, are being updated in languages in your application.” applications, the Web is probably time for the completion of the of business methods on an EJB. still working with the expert As for the forthcoming mod- the biggest area of usage. What is Java EE 6 specification. People were using workarounds group to figure out the details, is ularity, Chinnici said that the clear is that people who want Said Chinnici, “I think there until EJB 3. That required a the whole dependency injection EE 6 group just couldn’t wait something that’s closer to the were areas where EJB 3 didn’t certain amount of code. In EJB and context area,” said Chinnici. for modules to arrive, so it Ruby on Rails end of the spec- do 100% of the work, and 3.1 is 3.1, we added the concept of “There is the Web Beans JSR instead laid the foundation for trum find it difficult to use [Java adding that in. Sometimes asynchronous method invoca- [299], which is doing exactly the new profiles. EE], so the introduction of the there is an EJB component, tion. You can now do it without that: adding context manage- “In JDK 7, we’re finally going profiles is a great move,” he said. which is unique across an entire a lot of support classes.” ment and dependency injection. to get modules. I think that’s server. It’s a common design Perhaps the most difficult That’s something we’re spend- going to be something all devel- REST FOR THE WEARY pattern people use in the Java work for the expert group on ing a lot of time on right now. opers will have to know about. I Java EE 6 will take on some APIs language. There was no way to Java EE 6 was around depen- It’s fairly complicated. There’s think it’s going to give us a very it has never taken on before as express that in EJB 3.” dency injections. “I think that an a long history of doing depen- powerful mechanism to say well as those returning with He said that EJB 3.1 also area where there has been a lot dency injection in the platform. which APIs it depends on and updates. Chief among the new- adds “asynchronous invocation of work, and I think that we’re Adding another layer has to what it needs,” said Chinnici. T

SharePoint Boston!

Attend

Hyatt Regency Cambridge I SPTechCon features a heavy slate of classes to teach how to take full advantage of SharePoint, from business intelligence Cambridge, MA tools to reporting and much more. I Learn best practices for managing a SharePoint environment I Are you new to SharePoint? and integrating it with other systems to unleash the full power of the software ... and your company! I Have some experience, but are looking for more? I SPTechCon offers a deep dive into the architecture, and I An expert looking for advanced skills? provides practical classes on such SharePoint-centric features as Web parts, lists and pages. If you answered “yes” to any of these questions, then SPTechCon is for you! I Learn how to create applications for SharePoint that solve real business problems, and also see what kind of third-party

PRODUCED BY applications have already been created to run on top BZ Media of SharePoint.

For more information, go to Go Behind the SPTechCon Portal Boston! blog.sptechcon.com

6.The technical classes and workshops at SPTechCon are focused on 3.Find the best third-party tools and meet informally with the experts practical techniques and practices you can put to work today! in our exhibit hall! 5.Bring a group of developers, IT pros and business teams to 2.Learn from the brightest minds in the SharePoint universe! improve your whole organization’s skills – and get a discount Most of our speakers either are Microsoft engineers or have achieved to boot! Contact us for group registration discounts! MVP status based on their in-depth knowledge of SharePoint. 4.Take only the classes that work best for you. With more than 1.There’s a shortage of SharePoint experts! Develop your skills, 50 classes and workshops to choose from, you can make and improve your own professional standing! SPTechCon your own!

go to www.sptechcon.com 22 NEWS Software Development Times March 1, 2009 www.sdtimes.com

that the document is stored in within SharePoint. Its integra- Atalasoft delivers SharePoint document add-on tion with SharePoint helps businesses improve their busi- Vizit SP adds annotation and viewing capabilities for scanned documents, PDFs ness processes around scanned BY DAVID WORTHINGTON workflows for annotating, classi- SharePoint Server 2007 and add-ons or browser plug-ins. documents and PDFs, enabling Atalasoft, a document imaging fying, and viewing scanned and Windows SharePoint Services Vizit provides thumbnail greater collaboration, explained component maker, has released faxed documents and PDFs. 3.0. Vizit embeds its functional- navigation of documents within CEO and President Bill Bither. a SharePoint imaging solution Atalasoft released in Febru- ity directly into SharePoint so SharePoint libraries, as well as Atalasoft designed Vizit to that can be used in document ary Vizit SP for Microsoft that end users do not require an explorer view of the exact list install into SharePoint sites without requiring any custom integration, said Bither. The installation also includes Atalasoft’s Vizit Scan-to-SharePoint utility, which permits select Kodak scanners to scan images directly into a SharePoint library. A beta version of Vizit SP was released in October. Pricing starts at US$4,625 for a 25-client license and includes a year of maintenance and support. T NCover 3.0 expands .NET code coverage BY DAVID WORTHINGTON Gnoso, a code coverage tool maker, has updated its NCover code analysis tool with broader analytics and new reporting capabilities that help development managers assess .NET code quality. NCover Complete 3.0, released in February, has several more coverage points, including branch coverage, cyclomatic complexity (or conditional complexity), and method visits, said Daniel Waldschmidt, Gnoso’s technology evangelist for code coverage tools. With this data, NCover can create trend data from its coverage files and can automate coverage from within Microsoft Visual Studio Team Foundation Server. It is also interoperable with other code coverage tools, including Bullseye for native code and Clover for Java, said Waldschmidt. Additionally, NCover’s command-line utility is now able to perform over 30 different activities, Waldschmidt added. “Customers can create a workflow that takes .NET assemblies and passes them through NCover and other feedback loops,” he said. A greater variety of code quality reports can now be created. Previous versions produced only a single report for managers; NCover 3.0 produces over 22 reports, such as a build’s 20 most uncovered methods, Waldschmidt noted. T Software Development Times March 1, 2009 NEWS 23 Elementool gives managers a better handle on testing

BY JEFF FEINMAN test a program’s installation process, they Elementool, a provider of Web-based could create multiple scenarios for project management tools, released in the process and test each one. To do February Test Case, an online tool that that, a test manager needs a list of tests provides snapshots of test processes so so he or she can assign the different tests managers can ensure that testing runs to the team. according to plan. Issue tracking comes in Test Case, Yaron Sinai, CEO and founder of along with a helpdesk and file sharing Elementool, said that a team can create capabilities. There is also the ability to the tests they want to perform on their create forums and message boards to aid product, then use Test Case to run and in collaboration. manage the test process. Sinai said that a proper test manage- Test Case targets test managers and ment system is necessary to ensure that tries to keep them abreast of the tasks a team is running the right tests. A prod- that testing team members are carrying uct like Test Case will tell the manager out, according to the company. Test whether or not the team is following the Case lets test managers write test sce- tests he or she defined. narios, which describe steps for team “With Test Case, the team doesn’t members to follow while running tests. think,” Sinai said. “They just need to fol- “In order for the testing manager to low the steps. And for you, as a testing have full control over the testing manager, you know that once they com- process, he needs to have some kind of pleted a set of tests, you know they fol- a system that will enable him to make lowed the steps that needed to be fol- sure he doesn’t miss any test or bug,” lowed.” Sinai said. “The way to do that is to Because Test Case is Web-based, take a product, break it down into fea- test processes can be run from differ- tures and create different tests for each ent locations. It also integrates with feature.” Elementool’s other project manage- For example, if someone wanted to ment products. T 24 NEWS Software Development Times March 1, 2009 www.sdtimes.com Sun pushes open source in GlassFish Portfolio < continued from page 1 Portfolio is that both [GlassFish “You can begin working with ed to the three other new Glass- ESB is taking components that extends to higher levels of sup- and Java EE] are included with Java EE. Where it makes sense Fish components from Sun. have been developed in the port, which are available for a single subscription,” said to use BPEL for orchestration, OpenESB community, along $2,999, $5,999 and $8,999 per Kevin Schmidt, director of you can do that in a very incre- GET ON THE SERVICE BUS with GlassFish and the associat- server per year. strategy for software infrastruc- mental way.” The second component is ed tooling in NetBeans,” said “The beauty of GlassFish ture marketing at Sun. Those prices are also extend- GlassFish ESB. “GlassFish Schmidt. “It has transformation and routing capabilities.” Schmidt said that the key difference here is the inclusion of “core adapters for HTTP and than a speeding bullet, Web services. The ESB itself faster has at its core a [Java Business Integration] implementation more powerful than a locomotive, that uses a normalized message router so it’s doing everything in memory.” Schmidt said that able to simplify connectivity with a single component. this improves speed and responsiveness. The third new component is GlassFish Web Space Serv- er. This portal-like offering includes Web-based collaboration tools, such as LifeRay Portal. Schmidt said that it is targeted at developers who have moved beyond the idea of a simple portal and are looking for ways to give their users wiki-like capabilities for workplace collaboration. Finally, Sun is offering a set of enterprise-targeted Glass- Fish management tools. This is a value-added product that only Sun provides. Sun hopes the premium GlassFish Enter- prise Manager will entice developers to subscribe to the The Professional Developer’s #1 Choice for Communications, Security, & E-Business Components higher levels of support included with the software. All of the GlassFish Portfo- InternetCommunications InternetBusiness EnterpriseAdapters lio products include either GlassFish 2.1 or GlassFish 3 Prelude. That’s a fancy way of IP*Works! Products IBiz Integrator Products BizTalk & SQL Server Adapters saying that GlassFish 3 is still in beta, but Tegan Padir said that TCP/IP Secure SNMP QuickBooks First Data AS2 / EDI-INT GISB / NAESB the final version of GlassFish 3 E-Payment USPS SFTP / FTPS OFTP SSL Zip should be available in the E-Banking FedEx XMPP (Jabber) Secure Shell S/MIME EDI AS2 spring. Vital/TSYS Amazon SMS Paging Secure Email S/Shell No matter what products Paymentech PayPal AWS Integration Sun wraps around GlassFish, Our flagship product line. The result The IBiz product line provides small The /n software Adapters extend Andrew Binstock, principal of more than a decade of research and medium-sized companies with Microsoft BizTalk and SQL Server with analyst with Pacific Data Works and development in building Internet enterprise-class software components advanced Internet communications, and columnist for SD Times, connectivity tools for professional for Internet business integration. Built security, and e-business capabilities, isn’t convinced that the new- software developers. on top of our award winning IP*Works! including robust, highly scalable, fully comer application server will tools, these easy-to-use components integrated implementations of B2B influence many existing Web- Components for: Web and Web enable developers to rapidly integrate messaging and secure communica- Logic and WebSphere cus- Services, Email and News, File Transfer, common business processes. tions protocols. Sockets and Streaming, Remote Access, tomers. He said that those two Instant Messaging, SSL and Secure application servers have a huge Shell Security, Certificate Management Components for: Accounting Integration Components for: EDI-INT AS2 Integration, lead in user uptake, and they (QuickBooks), Credit Card Processing, Secure File Transfer, Secure Shell Remote & Creation, S/Mime Encryption, SNMP also offer scalability and stabili- Network Management, File & Streaming ACH / E-Check Processing, Shipping and Execution, Secure Email, RosettaNet Compression, and E-Business (B2B). Tracking, Banking &Financial Transac- Connectivity, OFTP Integration, NAESB / ty that isn’t available in other tions, and Services Integration. GISB Messaging, and more. products. “Whether GlassFish has a chance of making inroads in that market, that’s hard to say,” said Binstock. “The real competitor WWW.NSOFTWARE.COM - [ASK ABOUT OUR MSDN-STYLE ALL INCLUSIVE RED CARPET SUBSCRIPTIONS] for GlassFish is not Oracle or IBM. It’s probably JBoss.” T www.sdtimes.com Software Development Times March 1, 2009 NEWS 25

[EMMA] into their products,” EMMA ups device independence said Dahl. She added that development tools for multi-modal < continued from page 1 bunch of alternatives,” she said. nizes the device independence cations, where different inputs applications would follow. Dahl, chair of the Multimodal EMMA also makes supple- of applications and acknowl- are combined, will benefit peo- “Big companies have the Interaction Working Group at mentary information about edges that mainstream develop- ple with disabilities. resources to do anything that W3C. Those inputs can be com- interactions available, which ers have to deal with small “What we’ll see first is that they want in a proprietary way. bined to determine the full rep- may be useful to developers as devices that have non-tradition- companies that have speech EMMA will make a big differ- resentation of the user’s intent they strive towards accuracy. al inputs, said Dahl. W3C also application development plat- ence for smaller enterprises,” because each one is represented W3C increasingly recog- believes that multi-modal appli- forms will start to incorporate she said. T in a similar way, she explained. That redundancy helps EMMA account for ambiguity in user input to help overcome errors. “Speech is not as cut and dried as a mouse click. If there is more than one possibility for the user, user intent can represent a N Software’s Why is Amyuni PDF Web Part pulls in data so interesting?

BY DAVID RUBINSTEIN To give SharePoint information workers the ability to easily pull data from internal and external sources, N Software is prepar- ing the RSSBus Web Part for release in the next month or two, the company announced. The RSSBus Web Part, according to Gent Hito, president and CEO of N Software, Proven High-Performance Rapid Integration provides a wiki-like way to get information out of both internal Choose a PDF technology that is Develop with the fastest PDF Integrate PDF conversion, creation and external data sources. N integrated into thousands of conversion on the market, designed and editing into your .NET and Software has created more than applications behind millions of to perform in multithreaded and ActiveX applications with just a few 100 connectors. desktops worldwide. 64-bit Windows environments. lines of code. “We’re trying to get wiki as a paradigm and SharePoint together,” Hito said. “It uses the squiggly brackets that call into Expertise OEM Licenses Customization data sources, and the square brackets show on the Web Part Produce accurate and stable PDF License and distribute products Let our experienced consultants what comes from the feed. The documents using reliable tools quickly and easily with a PDF help you turn your software rest is really self-explanatory.” built by experts with over ten years technology that does not rely on requirements into customized The Web Part lets users get of experience. external open-source libraries. PDF solutions. around the need “for a developer to pull out Visual Studio to write an ASP.NET application, We understand the challenges that come with PDF integration. and then wait for the admin to hopefully install it. This short- From research and development, through design and circuits that process,” said Hito. implementation, we work with you every step of the way. The RSSBus Web Part also includes an HTML editor and a Get 30 days of FREE technical support with your trial download! rich text editor, so information workers with more advanced skills can change the look and feel of the page, Hito added. N Software had been pushing www.amyuni.com the “really simple” aspect of the bus, but Hito admitted, “We’ve had issues with people buying All trademarks are property of their respective owners. © 1999-2009 AMYUNI Technologies. All rights reserved. into simple services. Now, we USA and Canada Europe don’t even get into that discus- Toll Free: 1 866 926 9864 Sales: (+33) 1 30 61 07 97 sion anymore. With this [Web Support: (514) 868 9227 Support: (+33) 1 30 61 07 98 Part], we hope people can see Info: [email protected] Customizations: [email protected] the power of what we’ve been saying.” T 26 SPECIAL REPORT Software Development Times March 1, 2009 www.sdtimes.com

ALM 2.0: Lots of ways in Companies eschew ‘suites’ for platforms that open doors to business participation and other sets of tools

BY JEFF FEINMAN

hilip Deck hates the word “suite” aging all activities from requirements products lack proper integration. agement tools. “We want to be a good in the context of application life- management to release management. Because of that, Kovair went to the citizen in the tool world and integrate Pcycle management. While MKS has remained true to its drawing board and developed a browser- with whatever existing tools the cus- The CEO of MKS scoffed at the approach, many companies have given based product where all major products tomer may have,” Basu said. industry buzzword that describes a set of up their single rooms over the past few are integrated within a single frame- Basu added that it doesn’t make tools for designing, developing, testing years to invest in the ALM 2.0 approach, work, Basu said. sense today to have client-server desk- and deploying software. To him, a suite where everyone can be let in. This “We believe that there are great tools top ALM applications because more simply means a bunch of rooms linked up method puts a number of other doors in many different areas that we don’t software is becoming browser-based, so by a hallway. It means a luxurious cozy leading into the room so that products cover, like ClearCase, Perforce, Subver- there is no reason why ALM tools hotel room or a college dorm that allows from multiple companies can go in and sion, etc., so there are tools in areas shouldn’t be. Many ALM tools have a more than two students to share a living out as they please. which we don’t think we could add any browser interface, but those interfaces space. It does not mean a product that can more value,” Basu said. “So rather than are typically very lightweight. For properly manage an application life cycle. LETTING EVERYONE IN trying to replace any of those tools, we advanced features, developers have to “We don’t have a suite, we just have a One ALM company that exemplifies the integrate with them. By doing that, we use a client application. In contrast, single product,” Deck said. “The name notion of ALM 2.0 is Kovair Software. don’t ask our customers to replace any of Kovair’s ALM platform is architected for ‘suite’ doesn’t support the level of inte- Sky Basu, CTO and president of Kovair, their existing tools even when we have a the Web, Basu said, and this helps dis- gration that we have.” said the company also believes that tool in the same category.” tributed teams easily participate in the Though Deck might have veered ALM tools, no matter what company For instance, Kovair offers require- software life cycle. from calling his company’s product a they are created by, should be integrat- ments management software, but their One characteristic that many compa- suite, MKS Integrity is definitely a one- ed. Many major ALM companies have application life-cycle product can work nies feel is integral to the application room show when it comes to ALM, man- tools by virtue of acquisitions, but those with many other requirements man- life cycle is process automation. With www.sdtimes.com Software Development Times March 1, 2009 SPECIAL REPORT 27 teams becoming larger and spread out said. “If it’s solid, you’ve got a good basis on a global level, attempting to imple- ‘We don’t have a suite, for building a strong ALM suite.” ment the process manually can be diffi- we just have a single cult. Executives from both Kovair and EGGS IN ONE BASKET Urbancode said that process automation product. The name While many companies have adopted the is necessary. “suite” doesn’t ALM 2.0 approach that encourages unin- “No matter how many rules you support the level hibited use of products from multiple make about traceability, if you’re trying brands, there are others that focus on a to audit or trace manual processes, of integration that one-size-fits-all application life-cycle you’re essentially relying on those we have.’ offering. MKS’ Deck said that an ALM processes being executed correctly,” platform should have three main strategic said Maciej Zawadzki, president of —Philip Deck, CEO of MKS capabilities: linking artifacts between dif- Urbancode. “That doesn’t happen all ferent stages of ALM; change manage- the time, whereas if you’re dealing with ment; and configuration management of automated processes, then the trace- Zawadzki said that customers are most- Perforce, a leader in the SCM space, every artifact in the repository. ability and compliance is essentially ly interested in source code changes, said that SCM is the “foundation” of an “The industry typically looks at ALM built into the process.” who made them, and when were they ALM solution, while workflow manage- as a whole bunch of different Much like Kovair, Urbancode made. Urbancode’s data warehouse can ment serves as the “heart.” disciplines,” Deck said. “The industry approaches ALM with an ALM 2.0 view- extract that data and associate it with “Those two are most critical to inte- will say, ‘Check all the boxes and have point, and it sells an ALM framework that data from other systems. For example, grate,” said Tom Tyler, senior product some kind of bus to connect those disci- developers can plug other tools into. a developer can see what issues a consultant with Perforce. “When I see plines,’ and that’s ALM. Most vendors Zawadzki said that along with a process source code change corresponds to and ALM suites start to develop, it usually have gotten there by acquiring some- automation engine, developers need view the tests that go along with that starts with those two systems. They go thing in those spaces, and they put a nice built-in integrations. If a developer is change. out earlier in the life cycle to tie in brochure together and say, ‘See, you can using Subversion as his or her source code Perforce Software is another compa- requirements, and then later in the life get this from a single vendor.’ We take a repository and HP Mercury Quality Cen- ny that believes the best way to construct cycle to tie in build and release.” totally different approach to that.” ter for testing, for instance, Urbancode an ALM solution is to integrate best-of- Tyler emphasized that Perforce tries Executives from Seapine said that offers integrations with popular products breed components into a suite. Perforce to offer a product architecture that gives while many people want an integrated, like those. Urbancode customers can also executives identified the main parts of “hooks” to integrate easily with other best-of-breed approach to ALM, it’s write their own integrations if the compa- the life cycle as requirements manage- systems. Perforce also has branching important to be realistic about how the ny doesn’t provide them. ment, software configuration manage- and merging capabilities that let users integration will be done. Another key component to an inte- ment (SCM), workflow management, combine changes if they’re working on “I recommend taking a good hard grated application life cycle is a data build automation, continuous integration different versions of a product simulta- look at what resources you have avail- warehouse, according to Urbancode. and defect tracking. For these stages, a neously. able and who’s actually going to do the Tools from multiple companies will developer should find the best products “If your SCM is weak, there’s a limit work,” said Paula Rome, a senior prod- produce large amounts of data, and in each area and integrate them together. to how strong your suite will be,” Tyler continued on page 28 > 28 SPECIAL REPORT Software Development Times March 1, 2009 www.sdtimes.com ALM opens doors to other brands < continued from page 27 company. Whatever the fad of ALM, the first thing I would do as possible during the ALM in that process. Even folks like uct manager with Seapine. the week happens to be, I think is sit down with them and think process, not just developers and tech writers and graphic artists “You have to determine if it’s there are some fundamental about why you want to make testers, Rome said. ALM is a often get overlooked when soft- valid work that your developers truths about getting reliable this change.” “soup-to-nuts” deal, from ware is being created. are doing that would go direct- software out the door. For Organizations should make requirements to shipping, and “Don’t just talk to and lis- ly to the bottom line of your someone getting serious about sure to involve as many people there are a lot of people involved ten to your developers and testers, but look at other roles, your managers, stakeholders, graphic artists, everybody who’s involved in the process,” Your best source for Rome said. software development tools! Another company that ® emphasized the importance of having everyone participate in dtSearch Engine for Win & .NET VMware View Premier LEADTOOLS Document the process is Ravenflow. Com- Imaging v 16: Add dtSearch‘s “blazing speeds” Starter Kit by LEAD Technologies (CRN Test Center) searching and New View Premier is an Enterprise-class pany executives said there is one file format support 6 Desktop and Application virtualization LEADTOOLS Document Imaging has every 4-bit overriding concept from Raven- Versio suite that enables you to take control component you need to develop powerful • dozens of full-text and fielded n! of your desktops and applications while flow: being able to bring togeth- image-enabled business applications including data search options providing storage optimization. The specialized bi-tonal image display and • file parsers/converters for hit-highlighted er all team members, including Starter Kit is the entry level solution processing, document clean up, high-speed display of all popular file types that includes 10 concurrent user licenses project users and stakeholders scanning, advanced compression (CCITT • Spider supports dynamic and static web data; New of VMware Infrastructure Enterprise, Rele G3/G4, JBIG2, MRC, ABC) and more. highlights hits with links, images, etc. intact ase! from the business side. vCenter Foundation, ThinApp, View • Multi-threaded OCR/ICR/OMR/ • API supports .NET, C++, Java, SQL and more; Composer and View Manager. SnS “The key change we’ve seen MICR/Barcodes (1D/2D) Single Server View Premier new .NET Spider API is required and sold separately. since the economy crashed is a • Forms recognition/processing Paradise # Paradise # V55 66101A01 Paradise # • PDF and PDF/A “Bottom line: dtSearch manages a terabyte of D29 02101A07 focus on bringing the whole VDI Included L05 03201A01 • Annotation (Image Mark-up) text in a single index and returns results in $ 99 team together,” said Adam Fran- • C/C++, .NET, WPF - Win32/64 less than a second.” —InfoWorld 949. CALLI $ 99 kl, vice president of marketing 2,007. programmers.com/lead programmers.com/dtsearch programmers.com/vmware for Ravenflow. “You can’t ignore Pragma Fortress SSH c-treeACE™ Professional TX Text Control 14 the users. You have to make the —Secure Connectivity by FairCom Word Processing Components Best Seller! users part of the team.” by Pragma Systems The c-treeACE database engine is a high performance TX Text Control is royalty-free, Ravenflow’s concentration Pragma Fortress SSH provides a comprehensive database alternative proven by developers in mission robust and powerful word processing secure connectivity framework for enterprise critical enterprise systems, desktop deployments, and software in reusable component form. lies on business requirements customers. embedded devices for over 25 years. • .NET WinForms control for VB.NET and C# and in helping business analysts Full-featured server, graphical clients and graphical • Complete set of APIs including ADO.NET, LINQ, • ActiveX for VB6, Delphi, VBScript/HTML, ASP C#, C/C++, ODBC, JDBC, VCL, and dbExpress write requirements that stake- management capabilities are all included. • File formats DOCX, DOC, RTF, HTML, XML, TXT • Graphical productivity tools holders can validate and that Pragma Fortress SSH provides: Professional Edition • Simple deployment • PDF export without additional 3rd party • GSSAPI Kerberos & NTLM authentication tools or printer drivers Paradise # development and QA teams can • No DBA or ongoing administration T79 02101A01 • Accelerated SFTP & SCP file transfer • Nested tables, headers & footers, text understand. Frankl said that the • Low deployment licensing costs Paradise # frames, bullets, numbered lists, multiple $ 99 • Supports over 1000 sessions • Cross-platform support for all major platforms F01 0131 919. company has had a lot of interest Paradise # • Runs console applications & allows history undo/redo, sections, merge fields including Windows, UNIX, Linux, and Mac OS X $ 99 from traditional ALM compa- P35 0439 scroll back within the same session • Ready-to-use toolbars and dialog boxes Download a demo today. Make your applications faster, easier to deploy, 711. nies around integrating with its $ 99 and more affordable with c-treeACE. 550. programmers.com/pragma programmers.com/faircom programmers.com/theimagingsource business requirements tool. FarPoint Spread Mindjet MindManager 8 Enterprise Architect 7.1 for Windows Forms by Mindjet Visualize, Document and GET LEAN AND SIMPLIFY The Best Grid is a Spreadsheet. Give your users Do you harness the wealth of data, Control Your Software Project New Most companies agree that ® ® Release! the look, feel, and power of Microsoft Excel , Web pages, and other input that comes by Sparx Systems without needing Excel installed on their machines. your way every day? Is there a way to proper ALM should be a means New Enterprise Architect is a comprehensive, Join the professional developers around the use it more effectively to formulate new Release! integrated UML 2.1 modeling suite of making software develop- world who consistently turn to FarPoint Spread ideas, sharpen your focus, and ultimately providing key benefits at each stage of ment more effective, collabora- to add powerful, extendable spreadsheet solu- drive your success? New MindManager 8 system development. Enterprise Architect tions to their COM, ASP.NET, .NET, BizTalk Server for Windows is the answer. 7.1 supports UML, SysML, BPMN and tive and transparent. In today’s and SharePoint Server applications. Unlike the usual linear-based approach of for Windows other open standards to analyze, design, Corporate Edition economic environment, a more • World’s #1 selling development spreadsheet most productivity tools, MindManager 8 1 User test and construct reliable, well under- 1-4 Users stood systems. Additional plug-ins are efficient development process is • Read/Write native Microsoft Excel Files uses mind-mapping technology to let you Paradise # Paradise # • Cross-sheet formula referencing capture, organize, and communicate also available for Zachman Framework, important to avoid mistakes that Paradise # F15 17301A02 MODAF, DoDAF and TOGAF, and to SP6 0001 • Fully extensible models information using an intuitive visual could hurt a company financial- F02 01101A01 canvas. You’ll be able to work smarter $ 99 integrate with Eclipse and Visual Studio $ 99 • Royalty-free, run-time free 299. 182. $ 99 and transform your ideas into action 2005/2008. ly. Ryan Martens, founder and 936. programmers.com/farpoint more quickly. programmers.com/mindjet programmers.com/sparxsystems CTO of Rally Software, said that SlickEdit 2008 Telerik RadControls Multi-Edit 2008 because the economy is not for Windows by Telerik by Multi Edit Software quite the “rosy double-digit by SlickEdit Add grid, combo, editing, navigation and charting Multi-Edit 2008 delivers, a powerful IDE, growth environment” that it was SlickEdit 2008 is a cross-platform, multi-lan- functionality to your AJAX and ASP.NET projects. with its speed, depth, and support for for a lot of companies in recent guage code editor that gives programmers the RadControls for ASP.NET enhances your Web over 50 languages. Enhanced search ability to code in over 40 languages on 7 plat- applications by adding AJAX functionality to your functions include Perl 5 Regular years, it has let them take some forms. This latest version builds on the compa- ASP.NET projects. The suite takes full advantage Expressions and definable filters. time to figure out how to make ny’s 20 years of experience in enabling devel- of the features included in Visual Studio 2005. Supports large DOS/Windows, UNIX, New their software development opers and development teams to create, navi- RadControls for ASP.NET helps developers deliver binary and Mac files. File Sync Release! gate, modify, build, and debug code faster and feature-rich, standards-compliant (WAI-A, WCAG Integration for: Delphi 6, 7, 2005, processes leaner. more accurately. 1.0, XHTML 1.1) and cross-browser compatible C++Builder 6, BDS 2006 and RadStudio “Growth hides all issues for Web applications, while significantly cutting Single Developer 2007, VB 6, VC 6, VS 2003 & VS 1-49 User Paradise # their development time. RadControls for ASP.NET Paradise # 2005. Includes file compare, code Paradise # many customers,” Martens said. M39 19201A01 includes: RadEditor, RadTabstrip, RadInput, TB3 01101A01 beautifying, command maps, and A30 01201A02 “But now, a lot of companies $ 99 RadCalendar, RadUpload, RadWindow, RadAjax, $ 99 much more. $ 99 242. RadGrid, RadCombobox, RadMenu, RadSpell, 615. 161. are thinking, ‘How do we make RadChart, RadTreeview and more. programmers.com/slickedit programmers.com/telerik programmers.com/multiedit smart, short-term decisions in this economic crisis that have us 800-445-7899 programmersparadise.com come out of it in a better place Prices subject to change. Not responsible for typographical errors. than when we came into it?’ ” Martens said the implemen- www.sdtimes.com Software Development Times March 1, 2009 SPECIAL REPORT 29

not work for another. Develop- ers can saddle up with prod- and business professionals ucts they already have and manage the life cycle with tation of ALM isn’t just for pro- much like you would use CVS cation in terms of things like changes you make.” something that lets them use ject managers or developers, to manage change to your Java handling patches. We’ve got Of course, there are many those freely, or they can take but something that coordinates applications. some capabilities that can do choices for a developer or care of everything in one that large group of people in a “There are some unique that type of impact analysis to development team when it process-encompassing prod- transparent and agile way. Ral- requirements that happen make sure the vendors’ change comes to ALM, and what may uct. The options are many, but ly helps companies become around a vendor-supplied appli- isn’t going to override any be right for one team might there are options. T leaner with its software-as-a- service product that can connect distributed users all over the world. The company also has agile training and a coach- ing staff that helps teams plan their agile rollouts. “The hand and glove to that whole picture is when you talk about how to do rollouts effectively. We’re talking about issues around how you measure and organize your processes and how you put in ALM tools to enable this,” Martens said. “I think that a big differentiator for us is being able to address this whole problem on our SaaS platform.” While Rally tries to handle the entire problem with its offerings, Quest Software said the trick is to start small with the process. Starting with basic workflows and working gradu- ally towards larger, more involved ones can lead to better results in the long run. “Don’t over-engineer, don’t fall in love with a very detailed workflow,” said Ken Barrette, a product manager with Quest Software. “The tools can make it so easy to create a very complicated workflow, and people may almost get enthralled by that. But the reality is once they’ve been around the block a few times with different approaches to workflow, they may paint themselves into a corner and create an inefficient process.” Quest provides change management and version control products for Oracle E- Business Suite and People- Soft’s enterprise resource planning products. Quest’s position as an ALM solution is oriented towards the needs of those application teams, company executives said. Those products aren’t made up of source code, so they are a little different than typical Java or .NET applications. “Managing change isn’t as simple as checking the file in or doing a build, so that’s sort of where we come from,” Bar- rette said. “Our offering allows you to manage the changes you’re making to your Oracle or PeopleSoft application 30 OPINION Software Development Times March 1, 2009 www.sdtimes.com

FROM THE EDITORS LETTERS TO THE EDITOR Precision is the true Perl process ‘alive and well’ key to ALM Since you referenced me in your article, “The end for Perl?” (Jan.15, page 30), COMMENTS FROM pplication life-cycle management comes in many different flavors. allow me to say that the Perl 6 develop- THE WEB ADevelopers can chomp on a tasty one-scoop serving where a single ment process is alive and well, and gain- product will encompass each phase of the application life cycle, from ing incredible speed. Rakudo (Perl 6 on You can’t complain about Perl with- requirements definition to deployment, or they can dip their spoons into Parrot) is rapidly approaching beta sta- out the religious zealots coming out. many different cartons and use “best of breed” tools from multiple com- tus, with more useful functionality Of course all the tons of people being generated every day. A usable who have a hard time with its car- panies, leveraging ALM 2.0 integration. toon-character-swearing syntax are No matter what method of ALM a developer might choose, there are public beta release should appear at OSCON this summer, with an early- wrong: It’s easy! If most Perl projects common factors. Requirements must be communicated and document- adopter, production-ready release avail- are filled with gawd-awful code, that’s ed, the architecture must be defined, code must be written securely and able by year’s end. because of the programmers. It without bugs, changes need to be noted correctly, and the software must Sure, it’s been a long time since Perl couldn’t possibly be because the tool be deployed at the time the customer is expecting to receive it without 6 was first announced, and a few false itself is flawed. We definitely want any difficulties. Everyone involved in the process should be on the same starts to test implementation ideas the programming language we use to be like a natural language so we have page as to how the software will be sculpted. have come and gone, but with each round, more was learned about how to even more of a chance to misunder- There is no correct approach to ALM. Different methods and toolsets stand each other like we do with peo- will work for different development teams. Whether it is a browser-based tame this beast. A language that has all the things we’ve come to appreciate in ple all the time! And we all want sur- platform that allows for the use of third-party software anywhere in the classic Perl, as well as all the things prise in our life, so we would life cycle, or an approach that calls for one integrated product suite that people expect from a modern lan- definitely want a language that even spans the entire life cycle, it is all about making sure the process is car- guage, is not an easy task. The work to gurus get surprised by. “Programmer” ried out correctly. create a solid VM base that will allow Each ALM solutions provider has different points to make when dis- language interoperability (20+ lan- United States guages have proof-of-concept imple- cussing how to make sure the application life cycle is done without blem- Using Google trends as an argument is ishes. But the real key to proper ALM lies in a development team’s abil- mentations) that would also support Perl’s unusual demands was a bit more very lame. Perl is not specifically losing ity to carry out each phase of the process correctly. difficult than had been initially imag- ground to Python or Ruby, it’s just that ined, and that led to some delay as the dev languages market is sparser well. We’ve also had to deal with ill- now with so many great newcomers. A slimmer Java EE is better nesses and distractions of some of the Throw “java” (or “php”) into the equa- key members. tion and you’ll see that it declined ava Enterprise Edition is too big. We are glad that the platform, I’m still fully committed to updating steadily and in sync with Perl’s decline. Jwhich encompasses just about every technology that Sun and its our seminal Learning/Intermediate/ Does that mean Java’s dead? I don’t partners in the Java Community Process could throw at it, is going on Mastering Perl series for Perl 6 as soon think so. Besides, matching the a diet. as we get closer to a good beta release, reserved “perl” token against the more It’s not hard to understand why Java EE is so big. When Sun first and to continuing to have Stonehenge universal “python” and “ruby” is bogus. be the leading boutique training and Maybe the Perl language should be offered up the Enterprise Edition, Java was the wave of the future, renamed “Pearl” for the sake of good and the world was at Sun’s feet. It ran on anything, or at least that consulting company for both Perl 5 and Perl 6. search volume and lax columnists. was the theory. With only a few platform-specific shackles, the “write Randal L. Schwartz “Rodrigo” once, run anywhere” enterprise-grade infrastructure became a bucket Spain into which dozens of companies poured their hearts, their souls and Editor’s note: Randal L. Schwartz is co- Letters to SD Times should include the writer’s name, their APIs. author of several books on Perl and company affiliation and contact information. Letters But the years weren’t always kind to J2EE, now just called Java EE. founder of Stonehenge Consulting Ser- become the property of BZ Media and may be edited. As the platform grew more popular, more was demanded of it. The JCP vices, a Perl training company. Send to [email protected]. was only happy to supply new APIs, add-ons and extensions to Java EE as the demand grew. But by the time J2EE 4 arrived, the chalice of enterprise Java had runneth over. The platform as a whole included an SaaS adoption to increase DATA WATCH entire store’s worth of knick-knacks, specialty items, and solutions for any and all scenarios of enterprise coding. Many of those platform additions The current economic climate will accelerate the growth prospects for the offered redundant solutions to common problems, sometimes to accom- software-as-a-service model, according to research gathered by IDC. IDC said that organizations feel that SaaS allows for relatively easy expansion during hard times. modate different projects’ views of optimal technology, sometimes Below are some figures from the research: because good ideas were superceded by better ones. And so the platform grew and grew. And yet, there were still broad strokes of obvious tasks that the average corporate Java programmer needed to do. Leveraging existing 40.5% 2009 infrastructure on the Web may have been the biggest, most common- 2008 45% ly needed task in any Java environment, yet programmers were still 2009 76% required to configure thousands of other loose ends to make such a 23% project a reality. In other words, Java’s heft resulted in both flexibility Worldwide SaaS growth The percentage of U.S. firms By the end of 2009, 76% and complexity. will increase 40.5% that plan to spend at least of U.S. organizations will use News of the Java EE Web Profile is certainly welcome. This slimmer in 2009 compared 25% of their budgets on at least one SaaS-delivered Java EE implementation will streamline the development of those appli- to 2008. SaaS applications will increase application for business use. from 23% in 2008 to nearly cations that focus on JSF and JDBC. We’re happy Sun has finally figured 45% in 2010. Source: IDC out that simpler is often better. T www.sdtimes.com Software Development Times March 1, 2009 OPINION 31 Lower-level encryption’s dirty little secrets

orget about curious but good-natured tributing to the success of nearly one- if you’re thinking of using lower-level Fhackers. Forget about dangers from third of data breaches under investiga- encryption. SAN/NAS encryption can not-very-skilled script kiddies. The secu- tion. Contrary to years past, when coders result in questionable PCI compliance, Software Development Times Issue No. 217 rity stakes are much higher now. As our with bad intentions primarily released and separation of duties is impossible to March 1, 2009 economy continues to stagger like a self-replicating malware with highly achieve. File encryption doesn’t protect drunk on his way home from a bar, we’re obvious effects to boost their fame against database-level attacks, and here Editorial going to find that profit-based data among their peers, the focus has now again we have the separation of duties Editor-in-Chief breaches will escalate. If there is ever a shifted to stealth (the longer it lingers, issue to worry about. How are you going David Rubinstein good time to play with ineffective encryp- the more data it can collect) and target- to effectively and easily keep administra- +1-631-421-4158 x105 tion schemes, this isn’t it. Ulf Mattsson ed distribution. A key point tors from seeing what they don’t need to [email protected]

Yet some of the biggest to remember when you’re see with file-level encryption? Copy Editor Art Director names in information technol- mulling over the benefits of Native column-level encryption can Adam LoBelia Mara Leonardi ogy and security—RSA, Ora- lower-level encryption is that create a world of security and compli- [email protected] Columnists cle, IBM and Microsoft—are partial end-to-end encryp- ance traumas, including a lack of key Senior Editors Andrew Binstock currently pushing the use of tion of data fields can protect management capabilities, all sorts of Jennifer deJong Larry O’Brien lower-level encryption at the from some attacks by mali- interesting interoperability issues (espe- [email protected] Contributing Writers storage device level or file sys- cious code. cially with the point solutions you so Alex Handy Mary Jo Foley tems level. It’s a mystery to me Any security system is blithely deployed during yet another [email protected] Tina Gasperson why these industry leaders are only as strong as its weakest time crunch) and, yes, separation of David Worthington Geoff Koch advocating a flawed process link, and that is what attack- duties. Combining low-level encryption [email protected] Alexandra Weber Morales Lisa L. Morgan that will not protect data ers, inside and outside of the with essential auditing tasks, such as Assistant Editor against the ever-increasing number of enterprise, look for. Indeed, they’re database activity monitoring and log- Jeff Feinman Editorial Director sophisticated attacks. looking for those weak links everywhere, ging, creates additional problems, [email protected] Alan Zeichick Lower-level encryption can sneakily up to the application and even client lev- including monitoring but not blocking +1-650-359-4763 [email protected] drop-kick even the most well-inten- el, and down to the system internals and access to data. This results in scalability tioned enterprise out of compliance and driver level. issues with log volumes, while never into disarray. You’re sure you’re doing The conventional risk model used in helping catch bad guys. Sales & Marketing the right thing (after all, IBM said it was IT security is that of a linked chain: The There are also other problems to con- the way to go), but all of a sudden you’re system is a chain of events, where the sider that are limited to specific prod- Publishing Director Publisher listening to a compliance auditor weakest link is found and made stronger. ucts, such as central key generation not Ted Bahr David Lyman +1-631-421-4158 x101 +1-978-465-2351 explaining that your enterprise has failed Sounds good, but it fails to solve the being supported by DB2 V9.5, Oracle [email protected] [email protected] in the separation of duties, data protec- problem. The strengthening of any link, 11g, SQL Server 2005, Informix 10, Western U.S./Asia Advertising Traffic tion and key management areas, and even if made much stronger, does not Sybase 15 and Teradata 2.6. Central key Paula F. Miller Nidia Argueta now you need to do a lot of expensive, guarantee a less vulnerable system. The generation for column-level encryption +1-925-831-3803 +1-631-421-4158 x125 time-consuming remediation. system is just dependent on the next is not supported by SQL Server 2008. [email protected] [email protected] We all know it’s better to focus on weakest link. Worst-case scenario: The End-to-end encryption is an elegant Northeast U.S./ List Services maintaining strong data security than to newly hardened link may produce new solution to a number of messy problems. Southeast U.S./ Agnes Vanek Canada center our protection efforts on ever- weak links due to, for example, interop- It’s not perfect; field-level end-to-end Jonathan Sawyer +1-631-443-4158 [email protected] changing compliance requirements. A erability issues with other system parts. encryption can, for example, break some +1-603-924-4489 secure system is virtually always a com- Further, such solutions are actually applications, but its benefits in protect- [email protected] Reprints pliant system. And as you’ve probably based on the illogical presumption that ing sensitive data far outweigh these cor- Lisa Abelson guessed by now, I strongly believe that “no part will fail at any time”; if a criti- rectable issues. But the capability to pro- Mid-Atlantic/ +1-516-379-7097 Central U.S./Texas [email protected] it’s much better to use end-to-end cal part fails, the system fails. In short, tect at the point of entry helps ensure Daniel Gaiman encryption to protect sensitive data there is an inevitable single point-of- that the information will be both prop- +1-631-421-4158 x114 Accounting Viena Ludewig while it is in transit and at rest, internal- failure: that weakest link. Making the erly secured and appropriately accessi- [email protected] +1-631-421-4158 x110 ly and externally, because part of the link stronger will not make the single ble when needed at any point in its Washington/Europe [email protected] sensitive data field (or the whole field) is point-of-failure go away. At most, it may enterprise information life cycle. David Lyman continuously protected by a transparent shift it. So layers of security, including End-to-end data encryption can pro- +1-978-465-2351 encryption wrapper. integrated key management, identity tect sensitive fields in a multi-tiered data [email protected] Continuous protection is critical management and policy-based enforce- flow from storage all the way to the because, even if we hate to admit it, IT ment, as well as encryption of data client requesting the data. The protect- Reader Service experts are humans. We’re going to throughout the entire life cycle, are ed data fields may be flowing from lega- Director of Customer Service/ make mistakes and leave some attack essential for a truly secure environment cy back-end databases and applications Circulation Subscriptions vector open, some app unpatched, some for sensitive data. via a layer of Web services before reach- Agnes Vanek +1-847-763-9692 bit of something unsecured. The recent- There is a slew of research indicating ing the client. If required, the sensitive +1-631-443-4158 [email protected] ly released 2008 Verizon Business Data that advanced attacks against internal data can be decrypted close to the client [email protected] Breach Investigations Report, based on data flow (transit, applications, databas- after validating the credential and data- four years of research and forensic es and files) is increasing, and many suc- level authorization. examinations of more than 500 compa- cessful attacks were conducted against I’m always eager to try out the next nies that suffered a significant data data that the enterprise did not know new thing in security technology. I’m breach, indicated that most breaches was on a particular system. Storage-layer even open to fixing things that aren’t President result from a mixture of events instead encryption doesn’t provide the compre- broken, just to see what happens. But Ted Bahr of a single issue, and it noted that a hensive protection that we need to pro- some ideas are obviously flawed and not Executive Vice President human error often directly or indirectly tect against these attacks. And if you worth deploying. Lower-level encryp- Alan Zeichick contributed to the success of the breach. think you know exactly where every bit tion is one of those ideas, and I believe (While the phrase “data breach” con- of personally identifiable data resides on it’s a dangerous devolution in data pro- BZ Media LLC jures up visions of an international your company’s systems, you either work tection. T 7 High Street, Suite 407 attack, accidental, no-evil-intended for a very small company, or (congratula- Huntington, NY 11743 +1-631-421-4158 breaches are quite common.) tions!) you’re Mr. or Ms. Wizard. Ulf Mattsson is CTO of Protegrity, fax +1-631-421-4130 Malicious code was cited as con- There are other problems to consider which sells data security software. www.bzmedia.com • [email protected] Sixth Annual Gathering of the Eclipse Community Attend Eclipsecon 2009 Keynotes from: EclipseCon is the premier technical and user conference focusing on the power of the Eclipse platform. From implementers to users, and everyone in between, if you are using, building, or considering

Eclipse, EclipseCon is the conference Clay Peter Tim you need to attend. Shirky Vosshall Wagner

Over 240 Sessions and Tutorials Including: - Java Development - Mobile and Embedded - Modeling Jeff Don Kevin - OSGi Atwood MacAskill McGuire - Reporting - Rich Client Platform This is your opportunity to get in-depth - SOA Development technical information from the Eclipse - Test and Performance experts, learn the latest tips and techniques - Technology and Scripting for using the tools, network with fellow - Tools enthusiasts and experience the breadth and - Web Development depth of the Eclipse community. Attending - Business EclipseCon will expand your knowledge and - C/C++ Development make Eclipse work better for you. - Database Development - Industry Vertical March 23rd - 26th - Project Mashups Santa Clara, California Register at: www.eclipsecon.org www.sdtimes.com Software Development Times March 1, 2009 COLUMNS 33

advance the project. And the leading agile exponents—Kent Beck, Bob Martin The zealots of agile (especially) and others—tirelessly support this. In their writings and lecturing, he agile movement has been nothing es of the “other” path generally runs clear that I do not quarrel with agile there is no sense of when something is Tif not evangelical, even messianic, along the lines; that’s all well and good, techniques, only with the movement’s good enough. Their desire to gild the lily since its inception. From its founding but the vast majority of all software evangelism. In fact, when developing, I seems inexorable and frequently leads to with the publication of a manifesto (a development projects are failures. The very much veer towards agility, although unconvincing results. (I broke up that manifesto!) to its subsequent, continual presence of some notable successes does I still occasionally blend in elements code into a separate class and added sev- attack on the so-called waterfall model, not belie the landscape littered with the from the traditional model. (I would en methods for what benefit, again?) agile and its exponents have hewn close- detritus of dead or abandoned projects. refer to this model as the “waterfall This behavior is tolerable only on ly to the position that theirs is the one I am in full agreement. And in fact this model,” but the term is incorrect. The small projects. And that’s where the agile true path. And, consistent with this argument brings me to my second gripe history of waterfall dates to 1970, when exponents leave developers hanging. evangelical view, those who disagree with agile evangelism. Agile Integration Watch it was presented as a straw There is so little experience on all-agile either don’t really understand agile or projects fail too. The widely man by Winston Royce, not projects with more than 6 million lines are irretrievably deluded. quoted failure rates of projects as an actual model to be of code and, say, more than 2 million This point of view makes dialog about have barely dropped since the used.) unit tests, that we don’t really know agile’s strong points difficult and about its Agile Manifesto. And while the Evangelistic fervor has whether agile methods scale well, espe- weak points impossible. It fails to agile movement might want to sprung up again in the rather cially since they’re predicated on the use acknowledge that agile projects also fail lay claim to this small drop (and public head-butting going on of small teams. Nor do we know what and that, prior to agility, many very large attribute its small size to the between Joel Spolsky and var- changes need to be made at the level of software projects came to fruition without fact that so many projects are ious agile proponents regard- large projects. using agile techniques. We did, after all, not agile), I would disagree. ing Spolsky’s comment: “It Agile is a set of good development land a man on the moon without agile. We I speculate that two other doesn’t seem like you could techniques. But by no means is it the also routed phone calls, conducted the factors have contributed more: actually get any code written if only, nor necessarily the best, path. Says census, flew aircraft, made reservations, the huge improvement in the quality and you’re spending all your time writing 8 Michael Feathers, one of the moderate and performed many other activities that capability of development tools, and unit million unit tests, and every single dinky agile proponents: “Design by Contract relied on large-scale software that met testing. (Unit testing is not an agile tech- little class […] becomes an engineering works. Test-driven development works. requirements and generated valid nique per se. In fact, it was used and project worthy of making a bridge, where So do Cleanroom, code inspections and results—all without agile. Every major known by its current name for many years you spend six months defining a thousand the use of higher-level languages.” Any operating system in use today was written before other agile techniques—Scrum, little interfaces.” valid techniques applied with discipline with pre-agile techniques. So before lec- Extreme Programming, etc.—were for- Spolsky’s point is correct, even if the leads to quality code. Amen. T turing on the one true path, it’s important mulated. However, unit testing is associat- imagery is overblown. It is easy to end- to acknowledge that other paths can ed with agile primarily through the promi- lessly test and endlessly refine and refac- Andrew Binstock is the principal analyst indeed generate successful projects. nence of test-driven development.) tor code to the point that it becomes an at Pacific Data Works. Read his blog at The agile zealot’s take on the success- Before continuing, I want to make all-consuming diversion that does not binstock.blogspot.com.

accord to the SOLID guidelines. Exceptional programmers and teams Quality: You are gonna need it don’t need to hew to any line, whether YAGNI or SOLID, when it comes to ne of the guiding principles this past There’s recently been a dustup among fused diagramming for programming. guidance. You aren’t an expert in some- Odecade has been YAGNI: You Ain’t the twittering classes as to the proper For several years, every programmer’s thing until you know three ways to misuse Gonna’ Need It. YAGNI is a quick cure amount of YAGNI. Joel Spolsky, CEO of resume contained the keywords “Ratio- it. Bully for the expert teams at Fog Creek for the disease of Analysis Paralysis, Fog Creek Software, has advocated an nal Rose.” I was as guilty as anyone in who can operate without resorting to whose symptoms include creeping scope, extreme YAGNI stance, swiping along the overemphasizing diagrams, and I spent checklists. But most of us do need guid- inactive version control systems and way an over-reliance on unit tests and the a silly amount of time taping together ance and easy-to-remember acronyms. uncontrolled growth of class diagrams. so-called SOLID principles laid out by 16-page panoramic class diagrams and Spolsky’s own “Joel Test” of develop- YAGNI does have side effects, how- “Uncle Bob” Robert Martin (tinyurl fine-tuning which diamonds were filled ment team priorities is, in his own ever. Hyperyagnic Disorder results from .com/eaqkh). Spolsky dramat- Windows & .NET Watch and which were unfilled. (On words, “sloppy” and “highly irresponsi- abandoning too much structure and can ically overreached, claiming the other hand, certain dia- ble.” It’s also excellent in its concept and be every bit as harmful as Analysis Paral- that those advocating high grams, such as state-transi- brevity. In three minutes and 12 ques- ysis. The disorder is characterized by percentages of unit test cover- tion diagrams, are a lot easier tions, you can get a very good sense of a brittleness of code, difficulty in under- age or promoting SOLID to put together with a CASE team’s approach to software develop- standing intent, and growth in the size, design principles had “not tool than on a whiteboard, ment. On the other hand, it believes that but not the number, of source code files. written a lot of code.” and, fashion be damned, I usability testing can be accomplished by Consult your doctor if you experience a Robert Martin has written a say that diagrams are often grabbing the next five people who walk nested loop more than four levels deep. lot of code and needs no better than code for commu- down the hall and forcing them “to try Less flippantly, Analysis Paralysis and defense from me. On a person- nication.) the code you just wrote.” Hyperyagnic Disorder characterize too al level, each of the last three Spolsky is an exceptionalist When Spolsky attacks guidelines on much and too little mental abstraction in systems I’ve architected, while who argues that companies object-oriented design or high levels of the development process. not particularly large, have gone from should seek out and retain great pro- unit-test coverage, he is fighting yester- Software development is a game of bogged down to shipped to transacting grammers, and that talented program- day’s war. This wouldn’t be worth harping balancing abstraction. Too much abstrac- tens of millions of dollars per month. mers should recognize that they need on but for the fact that his arguments tion, and you find yourself reinventing e- When I look at troubled teams today, I see not work for merely average companies. could lead to a YAGNI imbalance. Quali- mail. Too little abstraction, and you cram Hyperyagnic Disorder far more than I see While this works for him, it necessarily ty is the route to productivity. If you need your entire system into a single webpage. Analysis Paralysis. When I interview job does not describe the average company productivity, you need quality. Quality can The success of abstractions in code drives applicants, Architecture Astronauts (as or the decisions made by programmers be improved with a balanced emphasis on us to seek abstractions in our develop- Spolsky labels them) are relatively rare about risk and stability in hard economic code production, testing and design. ment processes; the unwavering demands compared to Cowboy Coders who are times. Spolsky is no slouch in the area of You’re gonna need all those things. T of compilers drive us to think that we willing to abandon any semblance of dis- shipping software himself, and while I’ve need to shut up and code. Over the course cipline in the face of a looming deadline. never seen the code that drives Fog- Larry O’Brien is a technology consul- of a decade, common wisdom swings This is a change from a decade ago Bugz, I’m sure that it’s highly cohesive tant, analyst and writer. Read his blog at between one extreme and another. when, for a few years, the industry con- and has low coupling, even if it does not www.knowing.net. 34 INDUSTRY Software Development Times March 1, 2009 www.sdtimes.com

It’s an ugly habit. My phone has this irritating texting feature where it tries to guess the word that might be coming WHATEVER HAPPENED to the sick begin with back when UAC first shipped? next. So if I type “how are” it will display Emerging March 9—12 day? As someone who works from home, — David Worthington “you” next. However, nine times out of Technology Conference San Jose I’ve noticed that the sick day has no 10, it isn’t as spot-on as that example, O’REILLY MEDIA PLEASE COME meaning here. When I came down with to Boston and will suggest a word that makes zero en.oreilly.com/et2009 pneumonia in February, I had to take a For the SharePoint. sense. That’s the type of thing that will SD West March 9—13 day off. But I ended up working anyway I’m at the Hyatt with some friends make me get back to dialing a number Santa Clara because I had some phone calls sched- And they’ve got lots of room. and putting the phone to my ear. THINK SERVICES uled that day, and I couldn’t help but You can optimize your searches on the — Jeff Feinman www.sdexpo.com check my e-mail. Even my sideline jobs, server SaaS Summit March 11—13 freelancing for other magazines, could- With some documents we’ll be sharin’ IT IS SAID THAT the first half of a soft- San Francisco n’t be put off. soon. ware project takes 90% of the time, and OPSOURCE Everything in our digital culture Please come to Boston… the second half takes the other 90%. A big saassummit09.net screams “Now! Now! Now!” When She said yes, boy, please do SharePoint part of that reason is because of incorrect, MIX09 March 18—20 someone is down with an illness, nothing with me. incomplete or incoherent requirements. Las Vegas else stops or slows down. It’s as if the Okay, okay, I’m not Dave Loggins, but In a webinar I hosted last week, Gary MICROSOFT 2009.visitmix.com modern world can’t accept our humanity that doesn’t matter. The important news Mogyorodi, president of the Canadian at times. Maybe the next time I get ill, I’ll is that SPTechCon: The SharePoint Software Testing Board, discussed the EclipseCon 2009 March 23—26 unplug my DSL router and take the bat- Technology Conference, is coming to two keys points necessary to convert your Santa Clara ECLIPSE FOUNDATION tery out of my phone, because as I write Beantown. It’s from June 22–24, 2009, development team to the method called www.eclipsecon.org this, almost a week after I first became right on the Charles River at the Hyatt requirements-based testing—ambiguity Open Source March 24—25 ill, I am still sick. No rest for the wired. Regency Cambridge. reviews and cause-effect graphing. Business Conference — Alex Handy What’s unique about SPTechCon is First, verify the requirements against San Francisco that it’s designed specifically for you; it’s the objective. Will it do what we want it to THINK SERVICES AFTER WINDOWS VISTA improved the only practical conference about do? Then perform an ambiguity review. www.gdconf.com Windows security, it was disappointing using SharePoint today that’s totally This will yield a clearer requirements doc- Game Developers March 23—27 that the Windows 7 beta backslid. focused on improving productivity with- ument. Next, have the domain experts Conference Two serious vulnerabilities were in your organization. With sessions that review the document for content to make San Francisco uncovered in User Account Control cover deployment, administration, busi- sure it’s all in there. After that, create test INFOWORLD (UAC) by Windows bloggers Rafael ness applications, development and cus- cases using cause-effect graphing. www.osbc.com Rivera and Long Zheng, and Microsoft’s tomization, if it’s about SharePoint Serv- According to Mogyorodi, this requires PyCon March 27—29 initial response was not encouraging. The er 2007, it’s at SPTechCon Boston 2009. Bender RBT software, which can calcu- Chicago company downplayed the vulnerabilities, See you there! late the correct set of tests cases needed to PYTHON SOFTWARE FOUNDATION us.pycon.org/2009 arguing that its priority was to make UAC — Alan Zeichick cover all functions. In a paper, Mogyoro- more user friendly (perhaps its engineers di wrote that this technique uses the Cloud Computing March 30—April 1 Expo watched too many Apple ads). OVER THE PAST FEW months, I have same algorithms used in hardware logic- New York Microsoft recouped my confidence fallen deeper into the ever-growing pit circuit testing, where “test-case design SYS-CON when it announced that it would modify of doom that is text messaging. I used to in hardware ensures virtually defect-free cloudcomputingexpo.com Windows to run UAC’s control panel in a be a once-in-a-while texter, asking and hardware.” So requirements-based test- SaaScon 2009 March 31—April 1 high-integrity process. That eliminates answering a quick question here and ing probably won’t reduce the time Santa Clara the capacity for malware to manipulate there. But recently I’ve found myself spent on the first half of the project, but COMPUTERWORLD UAC, because the malware would first relaying whole messages to friends and with clear, correct requirements, the www.saascon.com have to elevate its privileges in order to do family, setting up weekend plans and second half won’t require another 90%. STPCon Spring March 31—April 2 so. I just wonder why wasn’t this done to telling people in detail about my day. — David Rubinstein San Mateo, Calif. REDWOOD COLLABORATIVE MEDIA www.stpcon.com Web 2.0 Expo March 31—April 3 San Francisco Subversion hosting and control company CVSDude has acquired 10% in 2008 compared with 2007, with revenue of US$1.13 billion. O’REILLY MEDIA Australia-based SharpForge, a project management software-as- License revenue for 2008 increased 11% year over year to $383.7 en.oreilly.com/webexsf2009 a-service company. CVSDude, which was founded in 2002 and cre- million. Additionally, Sybase reported that revenue for the fourth MySQL Conference April 20—23 ates SaaS Subversion and CVS servers, reported its biggest month quarter of 2008 increased 3% to $305.1 million from $295.2 mil- and Expo of revenue in company history in January, in stark contrast to the lion in the fourth quarter of 2007 . . . Symantec reported a net Santa Clara worldwide economic slowdown. Gross revenues increased by 92% loss for the third quarter of fiscal year 2009 of US$6.81 billion O’REILLY MEDIA in January 2009 compared to the same month a year before. compared with a net income of $132 million for the same quarter www.mysqlconf.com Exact figures weren’t disclosed because CVSDude is privately last year. The net loss for the third quarter includes a goodwill RSA Conference April 20—24 owned. The addition of SharpForge to the CVSDude lineup should impairment charge of approximately $7 billion. Symantec execu- San Francisco help to expand the Web-based interfaces that power the compa- tives said the goodwill impairment charge was a result of the cur- RSA ny’s SaaS SCM offerings, company executives said. Additionally, rent economic slowdown and a decline in the company’s market 365.rsaconference.com CVSDude’s corporate headquarters are now in Palo Alto, Calif. capitalization. The charge is expected to be finalized during the RailsConf May 4—7 . . . Oracle has announced an agreement to acquire mValent, a fourth quarter of fiscal year 2009. Deferred revenue at the end of Las Vegas provider of application configuration management software. Ora- the third quarter was $2.92 billion, compared with $2.88 billion in O’REILLY MEDIA cle executives said mValent’s offerings will enhance Oracle Enter- the same quarter a year before. Cash flow from operating activities en.oreilly.com/rails2009 prise Manager with capabilities for managing application configu- for the third quarter was down to $402 million compared with SPTechCon June 22-24 rations, such as automation and improved audit and governance. $462 million for the same quarter a year before . . . Data ware- Boston mValent will operate as an independent company until the deal housing and enterprise analytics company Teradata reported rev- BZ MEDIA www.sptechcon.com closes, which is expected to happen in June or July. Financial enue of US$493 million for its fourth quarter of 2008, an increase terms were not disclosed. of 6% from $466 million in the same quarter of 2007. Full-year For a more complete calendar of U.S. software development events, see www.sdtimes.com/calendar. 2008 revenue was $1.762 billion, a 4% increase from $1.702 billion Information is subject to change. Send news about EARNINGS: Sybase announced a full-year revenue increase of in 2007. T upcoming events to [email protected].

Software Development Times (ISSN 1528-1965) is published 24 times per year by BZ Media LLC, 7 High St., Ste. 407, Huntington, NY 11743. Periodicals postage paid at Huntington, NY, and additional offices. SD Times is a registered trademark of BZ Media LLC. All contents © 2009 BZ Media LLC. All rights reserved. The price of a one-year subscription is US$179 for subscribers in the U.S., $189 in Canada, $229 elsewhere. POSTMASTER: Send address changes to SD Times, PO Box 2169, Skokie, IL 60076. SD Times subscriber services may be reached at [email protected] or by calling +1-847-763-9692. Work with InterSystems. Not separate systems.

Ensemble

® Caché

Work with InterSystemsThe fastest waysoftware to to raisehave a interfaces,connected rules-based workplace. business processes, ®dashboards, productivity and lower costs. and other innovations – without rewriting your code. Ensemble is a rapid integration and development Ensemble includes InterSystems , the world's platform that makes it much easier to connect applications, fastest object database. Caché’s lightning speed, massive processes, and people. IT managers who have switched scalability, and rapid development environment give from other integration products report they canlegacy inish Ensemble unmatched capabilities. projects in half the time with Ensemble. For 30 years, we’ve been a creative technology For your future development efforts, if you embed partner for leading enterprises that rely on the high Ensemble you can create a new class of applications that performance of our products. Ensemble and Caché are are connectable. Plus, you’ll be able to enhance so reliable that the world’s best hospitals use them for applications with adaptable worklow, browser-based user life-or-death systems.

See product demonstrations at InterSystems.com/Connect17JJ

© 2008 InterSystems Corporation. All rights reserved. InterSystems Ensemble and InterSystems Caché are registered trademarks of InterSystems Corporation. Other product names are the trademarks of their respective vendors. 11-08 Work17SDTi Advanced Digital Dashboards Require Advanced Data Visualization

Available for Visual Studio 2008 & SQL Server 2008 Reporting Services

Build Custom Executive Dashboards With Data Visualization Solutions From Dundas! As the leader in data visualization solutions for .NET, SharePoint 2007 and SQL Server Reporting Services 2005 & 2008, Dundas offers the latest award-winning chart, gauge and map technologies. See why Fortune 500 companies around the globe trust Dundas to create advanced custom dashboard applications.

For customers requiring additional assistance, Dundas Consulting offers unmatched expertise and experience in creating and optimizing digital dashboards and their supporting infrastructure. Our team of highly specialized software consultants and graphic artists can help you jump start your dashboard initiative, build your complete system or simply advise you on all the tasks associated with bringing a dashboard system to life.

To see for yourself how Dundas products can improve your applications, download full evaluation copies of Dundas Chart, Gauge and Map from www.dundas.com/downloads.

Available for: SharePoint 2007 .NET SQL Server Reporting Services

Microsoft, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries www.dundas.com [email protected] (416) 467-5100