Safety & Security

Total Page:16

File Type:pdf, Size:1020Kb

Safety & Security 06 23. März 2021 8,00 € Organ der Elektronik SAFETY & SECURITY Mit den richtigen Tools und Testmethoden zu besserer Software Sensoren-Highlights für die Medizintechnik und den Bereich Automotive Digi-Key_9-6_Mill_DE_Snipe_EK_22_20.pdf;S: 1;Format:(55.00 x 55.00 mm);12.Oct 2020 09:55:57 NEU Jetzt 28 Seiten als Heft im Heft! EDITORIAL DER BLICK AUFS GANZE „Was haben Sie schon Neues oder Interessantes gesehen?“ – Diese Frage wird mir oft auf Messen gestellt. Auf der embedded world DIGITAL, die Anfang März statt- fand, war vieles anders als bisher, aber sie bleibt auch in Pandemiezeiten ein Branchentreff, der Trends und Entwicklungsrichtungen aufzeigte. Die Embedded-Branche war in den vergangenen Jahren von Schlagworten geprägt, die gut klingen und von denen sich auch alle einig sind, dass sie die Entwicklung kennzeichnen, aber dennoch waren es Inseln, die wenig Verbindung miteinander hatten: Hardwarehersteller setzen auf Edge Computing, die Soft- werker machen DevOps, die Tool-Hersteller verlagern ihre Angebote mehr und mehr in die Cloud, Betriebssysteme werden virtualisiert, Analysten und Wissen- schaftler prophezeien eine Welt autonomer, intelligenter und adaptiver Systeme. Die embedded world mit ihren zahlreichen Ausstellerforen, Roundtables und den zehn Conference-Tracks hat diese Bestandteile zu einem Gesamtbild zusammen- gefügt und wer die Zeit hatte, etwas intensiver in die verschiedenen Angebote reinzuhören, konnte einen recht guten Überblick gewinnen, wie die smarten Ökosysteme der Zukunft aussehen, was sie können, aber auch, was noch Aufgabe der Forschung ist. Die noch anhaltende Phase der Zentralisierung durch Cloud Computing hat die IT-Branche weitaus stärker erfasst als die Embedded-Branche. Erst jetzt, wo Server- Rechenleistung auch am Rand des Netzwerks entsteht (S. 13) und Mikrocontroller mit dedizierten KI-Beschleunigern einzelne Geräte „smart“ machen, treibt dies die Vernetzung auch bei den Embedded-Geräten voran. Das Internet of Things besteht aus vielen Inseln und Zweigen mit ihren eigenen Technologien, die nicht direkt miteinander kommunizieren. Da wird die Cloud als Bindeglied benötigt, das alle Daten zusammenführt und daraus Informationen extrahiert. KI- und ML-Technologie werden produktiv vor allem in der industriellen Bildver- arbeitung eingesetzt. Bei allen sicherheitskritischen Anwendungen hingegen ist es noch ein weiter Weg bis zum Einsatz in der Praxis, denn wie man ein adaptives, selbstlernendes System mit Zertifizierung zusammenbringt, ist ein bisher ungelöstes Problem. Allerdings konnte man auf der embedded world auch recht anschaulich den Nutzen solch adaptiver Systeme erleben und wie sich dadurch Produkte opti- mieren und an neue Rahmenbedingungen oder an das Kundenverhalten anpassen lassen. „Develop once, deploy forever is over“, so sagte es Wind-River-CEO Kevin Dallas plakativ. Klingt einfach, wird in der Praxis aber noch auf einige Hürden für die Umsetzung stoßen. Genug Stoff also für die nächsten embedded „worlds“. JOACHIM KROLL Chefredakteur [email protected] 06.2021 Elektronik 3 INHALT 11 16 60 64 EDITORIAL GMM-NEWS 3 Der Blick aufs Ganze 15 Bis 30. April Bewerbungen einreichen: GMM-Preis und Alfred-Kuhlenkamp-Preis der GMM IMPULSE ENTWICKLUNGSTOOLS 6 Softwareentwicklung: Updates over-the-air für Embedded-IoT-Geräte 16 Fehler in Änderungen vermeiden: 8 Debugging komplexer Multicore-Controller: Regressionstests von Softwarecode UDE 2021 vereinfacht Testen und Debuggen 20 Automatisiertes Testen von Embedded-Software: 10 LED-Beleuchtung: Testfallgüte problemlos prüfen Kundenspezifisches Lichtfasersystem ausgebaut 25 Interview mit Ravi Subramanian, Siemens EDA: 11 EU-Projekt Graphene Flagship: Hardware ist wertvoll – und profitabel Graphen in die Halbleiterfertigung integrieren 13 COM-HPC: Standard für Computermodule offiziell SAFETY & SECURITY ratifiziert 14 Kombination aus SOM und SBC: 57 Schutz für vernetzte Maschinen: Technik als Tresor Computermodule – neu gedacht 60 Zertifizieren von Systemen: Mit dem richtigen Tool zum Erfolg 4 Elektronik 06.2021 INHALT 20 70 SENSORIK 64 Wearables und Medizintechnik: Vitalparameter erfassen 70 Funktionsweise und Anwendungsgebiete von VCSEL: Alternative zur IR-LED 76 Halleffekt-Halbleiter: Graphen im ersten Großeinsatz VORSCHAU 79 Ausblick: Elektronik 07/2021, Termine und mehr 75 Impressum, Inserenten Ab Seite 27 als Heft im Heft! 06.2021 Elektronik IMPULSE SOFTWAREENTWICKLUNG UPDATES OVER-THE-AIR FÜR EMBEDDED IOT-GERÄTE Die Software von IoT-Geräten ist oftmals noch mit versteckten Fehlern behaftet. Mit Over-the- Air-Updates ergeben sich jedoch Möglichkeiten für Entwickler, Bugs frühzeitig zu eliminieren. Von Dr. Johan Kraft Over-the-Air (OTA)-Updates sind einfach OTA-Update lässt sich zwar das Problem Bugs neu und relevant sind und die Ent- auszuführen: Download und Installation im Feld lösen, jedoch benötigen Entwick- wickler anschließend darüber informie- erfolgen oft unbemerkt im Hintergrund. ler zusätzlich eine Art Rückmeldesystem, ren. Ist das geschehen, gilt es, die ak- Zusammen mit Software-Tracing, las- um überhaupt von Fehlern in den ausge- tualisierte Software per OTA-Update an sen sich mit OTA-Updates Qualität und lieferten Produkten zu erfahren – und das alle Geräte zu verteilen. Zuverlässigkeit von Embedded-IoT-Sys- möglichst zügig. Beim Entwickeln von Seinen Anfang nimmt der Informations- temen verbessern. Denn trotz aller Mü- Mobile- und Cloud-Anwendungen ist die fluss im Fehlerbehandlungscode des hen der Entwickler weisen die Systeme Vorgehensweise schon längst Standard IoT-Geräts, beispielsweise in den bereits oft noch Bugs auf. Beim Programmieren (DevOps), ab sofort kommt sie ebenso für existierenden Sanity Checks und Fault entstehen pro 1.000 Codezeilen durch- die Embedded-Entwicklung in Betracht. Exception Handlern. Mithilfe eines Soft- schnittlich 120 Bugs, wovon ungefähr wareagenten werden Firmware-Proble- fünf Prozent, also etwa sechs Bugs pro EFFIZIENZ DES CODES me als Warnung in den Cloud-Account 1.000 Codezeilen, bis zum Ausliefern ENTSCHEIDEND eines Kunden hochgeladen. Ein solcher nicht behoben werden. Alert kann neben der eigentlichen Feh- Entwickler sollten sich aber nicht darauf Entscheidend für das Aufdecken und Lö- lermeldung ebenso Zusatzinformatio- verlassen, dass Anwender die Fehler sen von Fehlern ist ein Zusammenspiel nen umfassen, die für das betreffende melden. Zumal Benutzerantworten meist zwischen Software-Tracing, Cloud-Ma- Problem relevant sind – zum Beispiel eher vage sind und kaum zum Behe- nagement und OTA-Updates. In einem Softwarezustandsvariablen und Inhalte ben beitragen. Noch schwerer wiegen System, das ohnehin von Ressourcen- von Hardwareregistern. Abhängig da- die Fakten, wenn es nicht um Tausen- verknappung geprägt ist, muss der Tra- von, wie gravierend der Fehler ist, wird de, sondern um Millionen von Geräten cing-Code möglichst effizient sein. Ei- der Alert entweder sofort oder nach ei- geht. Außerdem treten die unentdeck- nerseits muss die Cloud sicher und nem Neustart des Geräts hochgeladen, ten Bugs meist nicht sofort auf, sondern transparent angebunden sein, anderer- sobald die Verbindung zur Cloud wie- bereiten lediglich unter ganz bestimmten seits sind die richtigen Daten zu übertra- derhergestellt ist (Bild). Bestandteil der Bedingungen Probleme. Andernfalls hät- gen. So können Entwickler Fehler schnell Warnung kann ebenso ein automatisch ten Entwickler sie bereits vor dem Aus- und einfach beheben. Der Cloud-Dienst aufgezeichneter Trace der jüngsten Soft- liefern der Produkte gefunden. Mit einem muss also zunächst feststellen, welche wareereignisse im Gerät sein. Hierin sind Bild. Sobald die Verbindung zur Cloud hergestellt ist, wird der Alarm entweder sofort oder nach Neustart des Ge- räts hochgeladen – abhängig davon, wie gravierend der Fehler ist. (Bild: Percepio) 6 Elektronik 06.2021 IMPULSE Detailangaben zum Fehler selbst sowie Fehler informiert, können sie auf die mithilfe von automatischen Benachrich- zum Kontext enthalten. Warnmeldung und Traces zugreifen. tigungen der Entwickler beschleunigt. Dabei kommt es entscheidend auf die Ein solches System muss skalierbar, Codeeffizienz an, um möglichst wenig DATENSCHUTZ HAT VORRANG sicher und für die Entwickler transparent Speicher für den Trace in Anspruch zu sein. Einmal eingerichtet, informiert es nehmen. Wichtig ist eine solche Effi zienz Hierbei hat der Datenschutz eine hohe Entwickler umgehend beim ersten Auf- aus zwei Gründen: Erstens reduziert Priorität. Zum Beispiel darf ein Software- treten eines Fehlers. Zu dem Zeitpunkt sich beim Zusammenstellen hinreichend Trace niemals den Cloud-Account des wurde es vom Anwender oft noch nicht langer Traces die Uploadzeit auf Bruch- Kunden verlassen. Für das Verarbeiten in einmal bemerkt. Anschließend kön- teile einer Sekunde. Zweitens werden die der Cloud, welches ein externer Cloud- nen die Entwickler dann die Vorteile der Cloud-Kosten für das Entgegennehmen Dienst übernehmen kann, wird lediglich OTA-Updates nutzen, um ihr Produkt und Abspeichern der Alerts minimiert. Es eine anonyme Signatur der Alarmmel- zügig zu verbessern. TS ist die Codeeffizienz, die den Einsatz der dung benötigt. Eine solche Information Trace-Technik im Feld, selbst in kleinen lässt sich vollkommen transparent, kon- IoT-Geräten erlaubt. figurierbar und für sich genommen be- DR. JOHAN Der Softwareagent lädt Warnmeldun- deutungslos gestalten. Kommunikation KRAFT gen in die Cloud des Kunden hoch. Sie und Speichern handhabt die bestehen- ist so konfiguriert, dass sie Alerts spei- de IoT-Entwicklungsplattform,
Recommended publications
  • Parasoft Dottest REDUCE the RISK of .NET DEVELOPMENT
    Parasoft dotTEST REDUCE THE RISK OF .NET DEVELOPMENT TRY IT https://software.parasoft.com/dottest Complement your existing Visual Studio tools with deep static INCREASE analysis and advanced PROGRAMMING EFFICIENCY: coverage. An automated, non-invasive solution that the related code, and distributed to his or her scans the application codebase to iden- IDE with direct links to the problematic code • Identify runtime bugs without tify issues before they become produc- and a description of how to fix it. executing your software tion problems, Parasoft dotTEST inte- grates into the Parasoft portfolio, helping When you send the results of dotTEST’s stat- • Automate unit and component you achieve compliance in safety-critical ic analysis, coverage, and test traceability testing for instant verification and industries. into Parasoft’s reporting and analytics plat- regression testing form (DTP), they integrate with results from Parasoft dotTEST automates a broad Parasoft Jtest and Parasoft C/C++test, allow- • Automate code analysis for range of software quality practices, in- ing you to test your entire codebase and mit- compliance cluding static code analysis, unit testing, igate risks. code review, and coverage analysis, en- abling organizations to reduce risks and boost efficiency. Tests can be run directly from Visual Stu- dio or as part of an automated process. To promote rapid remediation, each problem detected is prioritized based on configur- able severity assignments, automatical- ly assigned to the developer who wrote It snaps right into Visual Studio as though it were part of the product and it greatly reduces errors by enforcing all your favorite rules. We have stuck to the MS Guidelines and we had to do almost no work at all to have dotTEST automate our code analysis and generate the grunt work part of the unit tests so that we could focus our attention on real test-driven development.
    [Show full text]
  • Accelerate Software Innovation Through Continuous Quality
    Accelerate Software Innovation Through Continuous Quality 1 Software quality is recognized as the #1 issue IT executives are trying to mitigate. Enterprise organizations strive to accelerate the delivery of a compelling user experience to their customers in order to drive revenue. Software quality is recognized as the #1 issue IT executives are trying to mitigate. QA teams know they have issues and are actively looking for solutions to save time, increase quality, improve security, and more. The most notable difficulties are in identifying the right areas to test, the availability of flexible and reliable test environments and test data, and the realization of benefits from automation. You may be facing many challenges with delivering software to meet the high expectations for quality, cost, and schedule driven by the business. An effective software testing strategy can address these issues. If you’re looking to improve your software quality while achieving your business goals, Parasoft can help. With over 30 years of making testing easier for our customers, we have the innovation you need and the experience you trust. Our extensive continuous quality suite spans every testing need and enables you to reach new heights. 3 QUALITY-FIRST APPROACH You can’t test quality into an application at the end of the software development life cycle (SDLC). You need to ensure that your software development process and practices put a priority on quality- driven development and integrate a comprehensive testing strategy to verify that the application’s functionality meets the requirements. Shift testing left to the start of your development process to bring quality to the forefront.
    [Show full text]
  • Development Testing Platform Engines for .NET User’S Guide Version 10.3
    Development Testing Platform Engines for .NET User’s Guide Version 10.3 Parasoft Corporation 101 E. Huntington Drive, 2nd Floor Monrovia, CA 91016 Phone: (888) 305-0041 Fax: (626) 305-9048 E-mail: [email protected] URL: www.parasoft.com PARASOFT END USER LICENSE AGREEMENT PLEASE READ THIS END USER LICENSE AGREEMENT ("AGREEMENT") CAREFULLY BEFORE USING THE SOFTWARE. PARASOFT CORPORATION ("PARASOFT") IS WILLING TO LICENSE THE SOFTWARE TO YOU, AS AN INDIVIDUAL OR COMPANY THAT WILL BE USING THE SOFT- WARE ("YOU" OR "YOUR") ONLY ON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS OF THIS AGREEMENT. THIS IS A LEGALLY ENFORCEABLE CONTRACT BETWEEN YOU AND PARASOFT. BY CLICKING THE "ACCEPT" OR "YES" BUTTON, OR OTHERWISE INDICATING ASSENT ELECTRONICALLY, OR BY INSTALLING THE SOFTWARE, YOU AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT AND ALSO AGREE THAT IS IT ENFORCEABLE LIKE ANY WRITTEN AND NEGOTIATED AGREEMENT SIGNED BY YOU. IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS, CLICK THE "I DO NOT ACCEPT" OR "NO" BUTTON AND MAKE NO FURTHER USE OF THE SOFTWARE. 1. DEFINITIONS 1.1. “Concurrent User" means a person that has accessed the Software at any given point in time, either directly or through an application. 1.2. "Instance" means a single occurrence of initialization or execution of software on one machine. 1.3. "Licensed Capacity" means the capacity-based license pricing metrics identified in the Order Instrument, including, without limitation, Concurrent Users, Node Locked machines, and Instances. 1.4. "Maintenance" means the maintenance and technical support services for the Software iden- tified in the Order Instrument and provided by Parasoft pursuant to this Agreement.
    [Show full text]
  • Overcoming the Challenges of Safety & Security in the Renovo Automotive Data Platform
    Overcoming the Challenges of Safety & Security in the Renovo Automotive Data Platform A Customer’s Journey Overcoming the Challenges of Safety & Security in the Renovo Automotive Data Platform A Customer’s Journey WHO IS RENOVO? We build an edge-centric data management platform. Our primary purpose at Renovo is to develop and deploy ADAS (advanced driver-assistance systems) at scale for our customers and help them manage all their data. We provide a turnkey solution that helps accelerate the development cycles, push through the validation cycles, go all the way into production, and ultimately, reduce the operational cost. THE RENOVO AUTOMOTIVE DATA PLATFORM Data and data management are essential to modern automobile technology. To this end, I'll introduce you to the platform, explain how it works, and then talk about some of the data requirements in today's automotive industry. Let's drive right into the automotive data platform. We like to think about it as five key elements of the data platform. It's edge-centric. I mentioned this already. We think of the vehicle itself as part of edge compute technology as well as actual edge-based devices that are either co-located on premise or relatively close to your development facilities. It's intelligent. When we bring the data in, we're not just doing file management. We're managing at the channel level, at the metric level, or the object level. And we can filter that data, index that data, and enrich it. Figure 1: The Renovo automotive data platform. 2 Overcoming the Challenges of Safety & Security in the Renovo Automotive Data Platform A Customer’s Journey It's hyper scalable.
    [Show full text]
  • Evolving from Automated to Continuous Testing for Devops
    Issue 2 Evolving from Automated to Continuous Testing for DevOps As agile development practices mature and There are many nuances associated with the 1 DevOps principles begin to infiltrate our transformation from automated testing to Evolving from Automated to corporate cultures, organizations realize the Continuous Testing. In this introduction, we’ll Continuous Testing for DevOps distinct opportunity to accelerate software focus on three key distinctions: delivery. However, when you speed up 2 Research from Gartner: any process, immature practice areas and • Aligning “test” with business risk Market Guide for API Testing and roadblocks become much more pronounced. Service Virtualization It’s the difference between driving over a • Ubiquitous access to complete test speed bump at 5 MPH versus 50 MPH … environments 8 at 50 MPH, that speed bump is going to be Top 5 Continuous Testing quite jarring. • Extreme test automation at the API/ Questions from Gartner message layer Conferences Accelerating any business process will expose systemic constraints that shackle Aligning Test and Business Risk 9 the entire organization to its slowest moving The most fundamental shift required in Parasoft Continuous Testing component. In the case of the accelerated Accelerates Testing and moving from automated to continuous is SDLC, testing has become the most significant Improves Quality aligning “test” with business risk. Especially barrier to taking full advantage of iterative with DevOps and Continuous Delivery, 11 approaches to software development. releasing with both speed and confidence About Parasoft For organizations to leverage these requires having immediate feedback on the transformative development strategies, they business risks associated with a software must shift from test automation to Continuous release candidate.
    [Show full text]
  • Analytics & Reporting for Enterprise Software Testing
    Analytics & Reporting for Enterprise Software Testing DRIVING DEVELOPMENT & TEST PRODUCTIVITY DELIVER HIGH-QUALITY, SECURE SOFTWARE Do you know the risk of your release Parasoft DTP collects, correlates, and and how it impacts your business? analyzes data generated throughout the SDLC to produce intelligent, actionable Parasoft Development Testing findings so you can focus on the impact Platform (DTP) delivers actionable of changed code and demonstrate full insights so you can gain confidence in compliance traceability. your software releases. DTP monitors and measures the application of quality With DTP’s in-depth reports and practices, such as static analysis, dashboards, you get a comprehensive ACHIEVE YOUR unit and functional testing, coverage view of key quality metrics that DEVOPS GOALS analysis, and much more, to expedite help you balance many parallel and secure and compliant software. The often conflicting priorities. Eliminate Examine data from all your testing award-winning Process Intelligence the business risk associated with practices to gain a comprehensive Engine (PIE) identifies risky patterns faulty software, accelerate delivery, view of the test results and assess buried deep in the data and prioritizes and facilitate continuous process development and test priorities to findings based on your policies. improvement. meet quality objectives. IDENTIFY AREAS FOR IMPROVEMENT » Reduce development and testing costs by acting on insights Understand the impact of changes in your codebase and provide guidance on next obtained from key metrics. steps to the team to ensure the delivery of high-quality software. Test coverage data can be combined with other metrics to identify application hotspots in areas » Improve software quality and of the application that present the most significant risk.
    [Show full text]
  • IMPROVE UNIT TESTING for JAVA with AUTOMATION BEST PRACTICES for JAVA DEVELOPERS Improve Unit Testing for Java with Automation Best Practices for Java Developers
    IMPROVE UNIT TESTING FOR JAVA WITH AUTOMATION BEST PRACTICES FOR JAVA DEVELOPERS Improve Unit Testing for Java With Automation Best Practices for Java Developers Table of Contents 03 Introduction: Improve Unit Testing 03 What Is Unit Testing? 03 Improve Unit Testing With Automated Testing Tools 04 Best Practices for Developers 04 Unit Testing Best Practices: How to Get the Most out of Your Test Automation 10 JUnit Tutorial: Setting Up, Writing, and Running Java Unit Tests 17 Mocking in Java: How to Automate a Java Unit Test, Including Mocking and Assertions 24 How to Create JUnit Parameterized Tests 34 Get More Out of Unit Testing and Reduce Maintenance Efforts With Runtime Analysis 2 Improve Unit Testing for Java With Automation Best Practices for Java Developers Introduction: Improve Unit Testing WHAT IS UNIT TESTING? Unit testing is the practice of testing individual units or components of an application in order to validate that each of those units is working properly. Generally, a unit should be a small part of the application — in Java it's often a single class. Note that there is no strict definition of "unit" here, and it is up to the developer to decide the scope of tested code for each test. People sometimes contrast the term "unit testing" with "integration testing" or "end-to-end testing". The difference is that, generally, unit testing is done to validate the behavior of an individual testable unit, whereas integration tests are validating the behavior of multiple components together, or the application as a whole. As mentioned above, the definition for what constitutes a "unit" is not strictly defined, and it's up to you to decide the scope for each test.
    [Show full text]
  • Concerto および Development Testing Platformparasoft と 9.X レガシー機能
    Concerto および Development Testing PlatformParasoft と 9.x レガシー 機能 PARASOFT END USER LICENSE AGREEMENT PLEASE READ THIS END USER LICENSE AGREEMENT ("AGREEMENT") CAREFULLY BEFORE USING THE SOFTWARE. PARASOFT CORPORATION ("PARASOFT") IS WILLING TO LICENSE THE SOFTWARE TO YOU, AS AN INDIVIDUAL OR COMPANY THAT WILL BE USING THE SOFTWARE ("YOU" OR "YOUR") ONLY ON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS OF THIS AGREEMENT. THIS IS A LEGALLY ENFORCEABLE CONTRACT BETWEEN YOU AND PARASOFT. BY CLICKING THE "ACCEPT" OR "YES" BUTTON, OR OTHERWISE INDICATING ASSENT ELECTRONICALLY, OR BY INSTALLING THE SOFTWARE, YOU AGREE TO THE TERMS AND CONDITIONS OF THIS AGREEMENT AND ALSO AGREE THAT IS IT ENFORCEABLE LIKE ANY WRITTEN AND NEGOTIATED AGREEMENT SIGNED BY YOU. IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS, CLICK THE "I DO NOT ACCEPT" OR "NO" BUTTON AND MAKE NO FURTHER USE OF THE SOFTWARE. 1.0 DEFINITIONS 1.1 "Concurrent User" means a person that has accessed the Software at any given point in time, either directly or through an application. 1.2 "Instance" means a single occurrence of initialization or execution of software on one machine. 1.3 "Licensed Capacity" means the capacity-based license pricing metrics identified in the Order Instrument, including, without limitation, Concurrent Users, Node Locked machines, and Instances. 1.4 "Maintenance" means the maintenance and technical support services for the Software identified in the Order Instrument and provided by Parasoft pursuant to this Agreement. 1.5 "Node Locked" means a license for a single machine that has been authorized to run a single Instance of the licensed Software.
    [Show full text]
  • Parasoft DTP Analytics and Reporting
    Parasoft DTP Analytics and Reporting DRIVING DEVELOPMENT AND TEST PRODUCTIVITY SEE IT IN ACTION Get a demo and see what DTP could do for you. Understand the impact Parasoft DTP goes beyond your normal reporting and dashboarding tools: https://software.parasoft.com/dtp of changes in your code- base and provide action- CUSTOMIZABLE WEB-BASED INTERFACE able insights to the team Leverage customizable dashboards, widgets, GOING BEYOND to ensure the delivery of and reports for at-a-glance information about SIMPLE REPORTS high-quality software. the status of development activities. & DASHBOARDS Mitigate business risks without reducing INTEGRATION WITH OPEN SOURCE the productivity of the team with DTP’s ANALYSIS TOOLS AND TESTING centralized quality hub that aggregates all FRAMEWORKS Download extensions from the Parasoft • Aggregated data from all of the data from all of your testing practices, Marketplace, to integrate with popular open- your testing practices gives you including static analysis, metrics, unit source tools and systems. Leverage out-of- a comprehensive view of the testing, functional testing, manual the-box integrations with SCMs, such as Git, results of your testing testing, code coverage, and code reviews Subversion, AccuRev, Mercurial, Microsoft (from both Parasoft technologies and TFS, and Perforce, or publish sources directly • An interactive framework lets you OSS/3rd-party tools, supporting over 15 from analysis tools. navigate and analyze test results development languages). • Integrations with workflow By providing customizable dashboards REPORTING AND ANALYTICS ENGINES FOR management systems enable you and interactive Explorers, Parasoft DTP JAVA, C/C++, AND .NET to take immediate action helps you monitor and manage the quality Automate the collection of testing data by of the entire software development configuring and deploying Parasoft’s native • Flexible and powerful analytics process.
    [Show full text]
  • Continuous Testing Ebook.Pdf
    Target Audience This book is written for senior development managers and business executives who need to achieve the optimal balance between speed and quality with software applications that are the primary interface with customers... and ultimately revenue. It provides a business perspective on how to accelerate the SDLC and release with confidence. Today’s DevOps and “Continuous Everything” initiatives require the ability to assess the risks associated with a release candidate—instantly and continuously. Continuous Testing provides an automated, unobtrusive way to obtain immediate feedback on the business risks associated with a software release candidate. It guides development teams to meet business expectations and helps managers make informed trade-o decisions in order to optimize the business value of a release candidate. Continuous Testing is NOT simply more test automation. Given the business expectations at each stage of the SDLC, Continuous Testing delivers a quantitative assessment of risk as well as actionable tasks that help mitigate risks before they progress to the next stage of the SDLC. The goal is to eliminate meaningless activities and produce value-added tasks that drive the development organization towards a successful release—safeguarding the integrity of the user experience while protecting the business from the potential impacts of application shortcomings. Continuous Testing For IT Leaders Copyright © 2016 Parasoft All Rights Reserved Table of Contents Preface: Evolving from Automated to Continuous Testing for Agile and DevOps 2 Introduction 4 Testing: The Elephant in the Room 5 Continuous Testing is Not a Tool 7 The Value of Continuous Testing 8 What is “Business Risk”? 8 The Business Value of Continuous Testing 9 Re-Evaluating the Cost of Quality 11 Establishing Business Expectations 15 The Gap is Vast .
    [Show full text]
  • Parasoft C/C++Test
    Parasoft C/C++test UNIFIED C AND C++ DEVELOPMENT TESTING GET A FREE TRIAL https://www.parasoft.com/ctest Deliver C and C++ FUNCTIONAL SAFETY AND COMPLIANCE ANALYZE HOST-BASED software that’s robust, Parasoft C/C++test provides everything you AND TARGET-BASED need to comply with industry standards: predictable, and secure. C AND C++ CODE CERTIFIED SOFTWARE Manage risk and costs by building better Parasoft C/C++test is certified by TÜV SÜD Increase the Quality of Complex software. Static analysis and unit testing for functional safety according to IEC 61508, Embedded C/C++ Software are critical for application quality, securi- IEC 62304, and ISO 26262 standards, Reduce the risk of complex embedded ty, and safety, and the cornerstone of any helping development teams achieve the software, leveraging comprehensive connected-application development initi- desired safety integrity level (SIL/ASIL). C and C++ coding best practices (e.g. ative today. MISRA C/C++, AUTOSAR C++, JSF) and Parasoft C/C++test is a unified testing QUALIFICATION KITS a powerful unit testing framework for solution that helps you identify defects To streamline the process of tool verification, both your host and target platforms. earlier and reduce the overall burden C/C++test Qualification Kits are available of achieving compliance with standards for DO-178B/C, DO-330, ED-12B/C, ISO- Mitigate the Security Risk from such as AUTOSAR, MISRA, ISO 26262, 26262, IEC-61508, and EN-50128, and other Connected IoT Devices DO-178B/C, IEC 61508, and IEC 62304. safety standards. These kits are customized Ensure the consistent application of for your specific environment and usage C/C++test helps organizations reduce security best practices (CERT, CWE, requirements, ensuring you have all the risk, cut costs, increase productivity, and OWASP) and integrate with API-level documentation required for verification.
    [Show full text]
  • Parasoft Dottest REDUCE the RISK in C# and VB.NET DEVELOPMENT
    Parasoft dotTEST REDUCE THE RISK IN C# AND VB.NET DEVELOPMENT Complement your existing Visual Studio tools with deep static analysis and advanced coverage. Parasoft dotTEST automates a broad range of software quality practices, including static code analysis, unit testing, code review, and coverage analysis, including requirements traceability and the documentation required to verify compliance. IMPLEMENT SHIFT-LEFT TESTING INCREASE Save time and money by finding and fixing defects earlier. Reduce the effort and PROGRAMMING cost of delivering high-quality software by preventing more complicated and EFFICIENCY expensive problems down the line. » Ensure compliance with standards. ACHIEVE COMPLIANCE EFFICIENTLY Ensure your C# or VB.NET code complies with safety and security industry » Build security into your application. standards, like CWE, OWASP, PCI DSS and UL 2900. » Improve productivity and code quality. GET A COMPLETE VIEW OF TEST COVERAGE Tests can be run directly from Visual Studio or as part of an automated process. » Identify runtime bugs without To promote rapid remediation, each problem detected is prioritized based on executing your software. configurable severity assignments, automatically assigned to the developer who » Perform unit and component wrote the related code, and distributed to his or her IDE with direct links to the testing. problematic code and a description of how to fix it. » Automate regression testing. When you send the results of dotTEST’s static analysis, coverage, and test traceability into Parasoft’s reporting and analytics platform (DTP), they integrate with results from Parasoft Jtest and Parasoft C/C++test, allowing you to test your entire codebase and mitigate risks. TRY PARASOFT DOTTEST Learn how your team can improve code quality and compliance.
    [Show full text]