Static code analysis improves software quality & security

FPT Software provides full lifecycle services including software design, development, migration and modernisation, following best-in-class processes certified for ISO-9001:2008 and SEI CMMI Level 5. Providing software components for clients' systems often means working with legacy code and architectures that might not have been originally designed for modern interconnected environments. To deliver robust software for diverse environments ranging from embedded devices to enterprise and cloud systems, FPT must constantly improve their tools and processes.

To understand how static analysis tools could help improve their C, C++, C# and Java projects, the Delivery Management Office (DMO) at FPT performed a detailed evaluation of several tools and ultimately decided that Coverity Enterprise Code Advisor was the right choice for them. By helping identify and fix software problems early in the development process, it not only helps FPT improve software quality and security but also helps FPT reduce the cost of addressing those problems later and accelerates code reviews.

"After evaluating a number of options, we determined that Synopsys' Coverity solution would provide the best return on our investment," explained Mr. Do Van Khac, Vice President of Delivery, FPT Software. "Our evaluation determined that Coverity tools help our developers to be more productive by identifying relevant problems with fewer than 10% in both false positives and false negatives. The rich reporting capabilities provide us with real-time insight into emerging trends so we can address problems sooner and minimise schedule risk."

"Coverity Enterprise Code Advisor can help FPT Software maintain consistently high standards in their deliverables," said Ms. Geok-Cheng Tan, Managing Director, Synopsys. "It's hard enough to develop secure software from scratch. When teams have to work with legacy and third-party components that are not as well understood, automated testing and analysis tools add real value by identifying problems that would never be noticed by a human. Our market-leading analysis technology will enable them to effectively find and manage problems in their architecture, coding, interfaces and testing, thereby improving security, quality and robustness and maintaining FPT Software's reputation as a premier technology partner in Southeast Asia."