Test & Measurement

Software which combines policy-driven test orchestration and vulnerability management is available from Synopsys to simplify and streamline application security testing.

“Application security programs need to be effective and efficient at reducing software risk in order to deliver value,” said Jason Schmitt, general manager of Synopsys’ Software Integrity Group. “Many organisations embracing digital transformation are struggling with the complexity and operational costs of managing their software risk at scale. Synopsys Software Risk Manager provides teams with a holistic view of their application security posture while accelerating time to value and reducing the overall cost of their AppSec programs.”

The application security posture management (ASPM) software enables security and development teams to simplify, align and streamline application security testing across projects, teams and application security testing (AST) tools. It aligns intelligent policy-driven orchestration and vulnerability management capabilities with the Synopsys Software Integrity Group’s SAST and SCA engines, with support for other open source and commercial AST tools. The ASPM software also delivers an enhanced ability to implement application security consistently across any organisation, said Synopsys.

ASPM analyses security signals across software development, deployment, and operations to improve visibility, better manage vulnerabilities and enforce controls. Security leaders can use ASPM to improve application security efficacy and better manage risk, said market analyst, Gartner. 

The analyst company predicts that by 2026, more than 40 per cent of organisations developing proprietary applications will adopt ASPM to rapidly identify and resolve application security issues.

Software Risk Manager is built Synopsys’ Code Dx and Intelligent Orchestration products which have been redesigned and enhanced to deliver a comprehensive ASPM solution. The software allows teams to implement policy driven application security at scale. It allows users to centrally define and enforce universal security policies which specify parameters for test execution and vulnerability management. It also allows users to maximise existing security investments by unifying disparate application security testing tools. It also allows users transition and consolidate tools across teams.

Consolidating vulnerability reporting and management across projects, teams and tools allows users to obtain a complete picture of security risks that is normalised, deduplicated and prioritised across tools.

Another function of the Software Risk Manager is to integrate security workflows within existing developer toolchains and systems and enable quick onboarding for existing projects and builds.

Synopsys Software Integrity Group provides software security products and services and interoperates with third-party and open source tools. Synopsys specialises in electronic design automation (EDA) and semiconductor IP and a portfolio of application security testing tools and services. Customers are SoC designers creating advanced semiconductors and software developers.

http://www.synopsys.com

Layer one to three Ethernet testing is provided on a single platform by Keysight’s AresONE-M 800GE. It supports data centre interconnect speeds from 10GE to 800GE and validates network equipment interoperability and bandwidth performance to support transition to 800GE, said the company.

Data-intensive applications such as AI, high resolution video streaming, the IoT, 5G, edge computing and cloud computing require a secure and reliable 800GE network infrastructure, Keysight explained. Deploying 800GE into existing network infrastructures creates complex testing challenges for network engineers, introducing a variety of new and legacy networking protocols, multiple Ethernet speeds and an array of fibre and copper data centre interconnects (DCI). To properly validate the performance of network infrastructures and network system designs, equipment manufacturers and network operators must have a flexible test platform that can scale to evaluate mixed-speed networks while supporting a broad set of connections and network protocols.

The Keysight AresONE-M 800GE delivers the only Layer 1 to Layer 3 Ethernet networking and infrastructure test, said Keysight, supporting comprehensive DCI speeds from 10GE to 800GE in a single platform. Its range of capabilities enables design engineers and data centre operators to validate networking equipment interoperability and bandwidth performance while supporting the transition to 400GE and 800GE networks with the capability to also test slower, legacy Ethernet speeds.

In addition to comprehensive Ethernet speeds of 1x 800GE, 2x 400GE, 4x 200GE and 8x 100GE, it supports PAM4 and NRZ signalling. The AresONE-M 800GE features 106.25Gbit per second host electrical lane signalling with the ability to downshift to the lower electrical lane speeds of 53 and 25Gbits per second for 400GE and 100GE speeds.

The single test platform supports all required forward error correction (FEC) types and a full array of in-depth link tuning, stability, reliability, and performance measurement statistics.

It also provides the protocol support required to test enterprise, metro, and cloud-capable Layer 2 and Layer 3 switching and routing network equipment through the IxNetwork software application.

It is claimed to have the highest port density available today for 800GE test systems with support for eight ports in a single, two-rackmount unit chassis with additional configurations for two and four ports.

The AresONE-M 800GE uses an integrated physical layer digital signal processor (DSP) from Credo Technology Group for fast and efficient data transfer with low latency that enables data transit requirements of hyperscalers, enterprises, 5G carriers and service providers. The DSP is also claimed to optimise power consumption to reduce operational costs, minimise heat dissipation and meet energy-efficient standards for advanced networks.

http://www.keysight.com