Fortify Software announced May 15 that it is joining the FindBugs project as a sponsor and is offering its static code analysis technology to help open-source developers find dangerous security ...

Black-box testing is standard practice for analyzing the security of deployed Web applications. It's a practice that falls short in key areas, however, making it difficult for developers to find and ...