Klocwork: Static Analysis Made Practical

Abstract: This presentation will show how source code analysis can be applied even to code bases that have lived through the scrutiny of thousands of eyes, pointing out fundamental logic errors and "wide open" security vulnerabilities in widely deployed products. Risk is an inherent factor in software development: learn how to manage bug insertion risk with the careful application of automated source code analysis. His talk will show how the Klocwork Insight tool suite can bring static analysis assistance to every software engineers’ desktop so they can focus on the semantic defects that are NOT reflected in the source code.

Speaker Bio: Carl Burch was an engineer in Hewlett-Packard’s compiler lab for 24 years, where he worked on Fortran compiler front-ends, code generators, optimizers, linkers, and debuggers. He retired in 2007 and joined Klocwork, an independent software vendor specializing in source code analysis. Carl’s research interests include static analysis of source code, low-level optimization, processor architecture and software quality improvement. He holds nine U.S. patents. His mission now is spreading the word that the third generation of source-code analysis is here, and it deserves a place in software engineers’ quality and analysis toolboxes alongside unit and regression testing. Carl was also a surface line officer, retiring from the Reserves in 1995.

Please contact Prof. Squire with questions.

View the flyer here.