Developer "Airplane" uses Solar appScreener to improve the reliability of its information systems

2022: Using Solar appScreener

Aircraft Group of Companies uses a static code analyzer Solar appScreener to increase the security of your own information systems and applications developed in the company. Obb announced this on April 7, 2022. Rostelecom Solar The product is implemented as an automated solution in CI/CD processes that enable continuous integration software development.

Using Solar appScreener in the Aircraft Group of Companies will check for the absence of vulnerabilities mobile, server and web applications. The company develops its own information systems that cover all stages of the development life cycle. Among them are the real estate reservation system, solutions for managing the supply of building materials, interaction and settlements with contractors, etc.

Our company's mission is to create a different quality of life in urban areas and preserve people the most valuable resource - time, "said Mikhail Marmylev, deputy director for resource protection of the Aeroplane group of companies. - Our daily interaction with customers, contractors, partners requires reliable and secure information systems. Therefore, it is very important for us to identify and address any vulnerabilities at the stage of their development. Solar appScreener allowed us to automate these processes and minimize the associated costs.

When developing their own systems in the Aircraft Group of Companies, they use the concept of continuous integration and continuous delivery of software (CI/CD). This is one of the common DevOps practices that allows you to speed up development, testing and implementation. ON An important part of CI/CD processes is the timely detection and elimination of errors and vulnerabilities in the code. Solar appScreener can be linked to repositories, development and build tools, CI/CD servers, etc., thus implementing full protection of the software development lifecycle.

The Aeroplane Group of Companies also emphasized that the important quality of Solar appScreener is the support by the analyzer of a large number of programming languages, including 1C code, which was especially fundamental for the developer. As of April 2022, a static code analyzer from Rostelecom-Solar supports 36 programming languages ​ ​ and 9 executable file formats. At the same time, it automatically determines the language of the application and can analyze the code of programs that are written in several languages.

Digital channels of interaction with customers and partners in many companies came to the fore. Developers are forced to quickly provide the business with appropriate solutions, regularly refine them, update them, and expand functionality. At the same time, the requirement for a high speed of introducing current technologies can negatively affect the security of information systems, "said Daniil Chernov, director of the Solar appScreener Center of Rostelecom-Solar. - Therefore, it is very important to analyze the program code at all stages of product development. The Solar appScreener architecture enables it to be embedded in development processes, providing automated analysis and thereby reducing the effort to eliminate software vulnerabilities.