Project
Crypto Pro was unrolled by PT Application Inspector for the analysis of the source code of means of protecting
Customers: Krypto-PRO
Contractors: Without involvement of the consultant or not data Product: PT Application Inspector (PT AI)Project date: 2016/08 - 2016/10
|
On February 21, 2017 the Positive Technologies company announced use of PT Application Inspector technology in Crypto Pro company for the automatic analysis of security of the source code of the created means of cryptographic protection and the electronic signature.
Project Results
We constantly develop the services and products. At the same time, working within the concept of safe development, traditionally we impose quality requirements of the code, to the speed of identification and correction of vulnerabilities. Including because the competition in the market of means of cryptographic information protection and the electronic digital signature is high and demands from us especially responsible attitude to writing and the analysis of the source code. The general increase in number of products and their functional complication lead to progressive growth of volume of software development. All this in total pushed us to use also the automated tool — PT Application Inspector — which effectively supplements the manual analysis of the code. Igor Kurepkin, deputy CEO of Crypto Pro company |
As a rule, information security tools are not considered as a source of additional threat that does them by an interesting target for malefactors: even more often their vulnerabilities are operated at penetration into internal infrastructure of the organizations. Producers should consider these risks and develop the solutions according to requirements of safe development: timely detection and elimination of vulnerabilities considerably will reduce risks and value of possible damage, and thanks to automatic check will allow to detect more critically dangerous vulnerabilities. Alexey Goldbergs, the head on work with technology partners of Positive Technologies company |