<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">David Maxwell</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Coverity Report</style></title><secondary-title><style face="normal" font="default" size="100%">Open Source Business Resource</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2008</style></year><pub-dates><date><style  face="normal" font="default" size="100%">06/2008</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/156</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">On May 20, 2008, static analysis tool vendor Coverity released a report entitled &quot;Open Source Report 2008&quot;. The report includes information gathered over the first two years of the Coverity Scan project which was developed as part of a contract from the US Department of Homeland Security. Coverity provides its analysis tools to open source projects in order to identify quality and security flaws in the codebases. Once identified, the developers of the open source projects are given the information in order to facilitate hardening of the software.

The report includes information about the progress made by various projects using the Scan service. Additionally, the Scan databases constitute one of the largest and most diverse collections of source code to be built and analyzed while tracking changes to those code bases over a two-year period. This data provides a substantial set of samples for considering some questions about the nature of software. The report investigates relationships between codebase size, defect counts, defect density, function lengths, and code complexity metrics. This article highlights some of the results from the report.</style></abstract><issue><style face="normal" font="default" size="100%">June 2008</style></issue><work-type><style face="normal" font="default" size="100%">Articles</style></work-type><custom1><style face="normal" font="default" size="100%">Coverity
David Maxwell is Coverity's Open Source Strategist, and is tasked with the continuation and expansion of Coverity's DHS-sponsored open source scans. An open source security specialist, Maxwell has over 20 years of experience as an open source user and developer, and he is particularly active in the NetBSD community. He currently sits on the advisory board for the BSD Certification Group and the program committee for the annual BSDCan conference. He was also a NetBSD Security Officer from 2001-2005 and a contributor to the best-selling O'Reilly title &quot;BSD Hacks.&quot; Maxwell has previously worked as a lead kernel developer for Nokia, and architected the Internet Service offering for Fundy Cable in New Brunswick.</style></custom1></record></records></xml>