A Zero-day (0-day) vulnerability is a computer-software vulnerability introduced during the development process and not yet discovered by the developers. Zero-day vulnerabilities can be exploited by hackers, thus affecting the company’s reputation. Developers should seek to minimize the number of defects leading to such vulnerabilities. PVS-Studio, a static code analyzer for C, C++, C#, and Java code, is one of the tools capable of detecting security issues.
development guidelines
Handling Objections: Static Analysis Will Take up Part of Working Time
Talking to people at conferences and in comments to articles, we face the following objection: static analysis reduces the time to detect errors, but takes up programmers’ time, which negates the benefits of using it and even slows down the development process. Let’s get this objection straightened out and try to show that it’s groundless.
What Is MISRA and how to Cook It
Perhaps every microcontroller software developer has heard about special coding standards to help improve the code security and portability. One of such standards is MISRA. In this article, we’ll take a closer look at what this standard is, its concept and how to use it in your projects.
How Not To Code 