Private | |
Industry | Software |
Founded | 2001 |
Headquarters | Oulu, Finland |
Area served
|
worldwide |
Products | Fuzz (Robustness) Testing Tools, Software Composition Analysis, Situation Awareness Tools |
Services | Security testing services |
Number of employees
|
125 |
Parent | Synopsys |
Website | www |
Operating system | Cross-platform |
---|---|
Type | Computer security, Fuzzing, Robustness testing, Network Analysis |
Website | www |
Codenomicon Oy was a private company founded in late 2001 that developed fuzz testing and cyber supply chain management tools for network equipment manufacturers, service providers, government/defence and enterprise customers.
Codenomicon was acquired by Synopsys in July 2015. Codenomicon's product lines were integrated to Synopsys software integrity groups product portfolio.
Codenomicon's flagship product was Codenomicon Defensics, a fuzz testing platform for locating unknown vulnerabilities in any type of software. Over 270 Defensics test suites were available for fuzzing specific network protocols and file formats.
Codenomicon Defensics test suites used primarily generational fuzzing, a technique in which the test suite fully understands the protocol or file format being tested. For fuzzing network protocols or file formats for which no test suite exists, Codenomicon also offered template fuzz test suites for IP network protocols and file formats.
Codenomicon AppCheck was a static binary scanner for executable files and firmware images. Using proprietary technology, it performed a software composition analysis (SCA) on supplied firmware or application, and identified vulnerable third-party code that was used to build the binary.
Codenomicon AbuseSA was a threat intelligence aggregator that monitored indicators of compromise from various sources, and produces highly accurate and actionable events and reports. It ingested well known feeds such as ShadowServer, abuse.ch, Zone-H, Malc0de, and more. Codenomicon AbuseSA included visualizations of the live data streams, which gave security personnel the opportunity to analyze and examine abuse events in real time.
Codenomicon's founders had been researching and developing fuzzing tools since 1996. The first ideas for the engine were based on ideas the founders had while working at OUSPG, where systematic fuzzing was first used to break ASCII/MIME contents in email clients and web services. Later, the same technique was applied to ASN.1 structures in such protocols as SNMP, LDAP and X.509.
Codenomicon was founded in 2001. It's DEFENSICS product line grew to cover over 250 industry-standard network protocols and file formats, including wireless interfaces such as Bluetooth and IEEE 802.11 Wi-Fi. After Codenomicon was founded, The research side span out into PROTOS Genome project.
In 2014 Codenomicon set up heartbleed.com as a summary and Q&A about the OpenSSL Heartbleed bug.
In 2015 Codenomicon was acquired by Synopsys Inc.