SWAMP & Partners Panel Discussion
summary
Funded as a $23.5M, five‑year project, the SWAMP automates running multiple static and binary analysis tools (CodeSonar, Parasoft, GrammaTech/Red Lizard, Veracode) and normalizes outputs into a standard XML format so results fuse into a single viewer; Secure Decisions’ Codex correlates and triages findings. The platform already hosts 400 test applications, exposes tools via APIs, isolates each run in VMs on roughly 700 cores, and reports integrated results for continuous assessment.
AI-written summary · about
chapters (14)
- 0:00SWAMP panel intro
- 1:06SWAMP project overview
- 4:15Tool providers' roles
- 7:49Getting started with SWAMP
- 9:16Static analysis tools
- 12:29Service-based tools & APIs
- 13:52CodX platform
- 16:39Business rationale
- 25:44Use cases & trust
- 26:27Hardware advantages
- 31:10Data privacy & security
- 36:46Isolation & safety
- 38:54Static vs dynamic analysis
- 40:43Closing remarks
related talks
47mRollercoaster of Security Automation
54mSecure Software Development
01h 03mSOAP - Keynote: Beyond Code: New Signals for Static Analysis
03mdisplays breadth of security, safety, and static analysis
16mCode Security and Verification in the AI-Centric SDLC
57mWhat’s in an AppSec program?
54mA Shock to the System Static Analysis for Real AppSec
36mSecuring the software supply chain