headquarters oulu finland area served worldwide products fuzz robustness testing tools software composition analysis situation awareness tools services security testing services number of employees 125 parent synopsys website www.codenomicon.com codenomicon operating system cross platform type computer security fuzzing robustness testing network analysis website www.codenomicon.com codenomicon oy was a private company founded in late 2001 that developed fuzz testing and cyber supply chain management tools for network equipment manufacturers service providers government defence and enterprise customers . codenomicon was acquired by synopsys in july 2015 . 1 codenomicon s product lines were integrated to synopsys software integrity groups product portfolio . contents 1 product lines 1.1 codenomicon defensics 1.2 codenomicon appcheck 1.3 codenomicon abusesa 2 history 3 robustness testing 4 references 5 external links 5.1 security advisory links 5.2 video links product lines edit codenomicon defensics edit codenomicon s flagship product was codenomicon defensics a fuzz testing platform for locating unknown vulnerabilities in any type of software . over 270 defensics test suites were available for fuzzing specific network protocols and file formats . codenomicon defensics test suites used primarily generational fuzzing a technique in which the test suite fully understands the protocol or file format being tested . for fuzzing network protocols or file formats for which no test suite exists codenomicon also offered template fuzz test suites for ip network protocols and file formats . codenomicon appcheck edit codenomicon appcheck was a static binary scanner for executable files and firmware images . using proprietary technology it performed a software composition analysis sca on supplied firmware or application and identified vulnerable third party code that was used to build the binary . codenomicon abusesa edit codenomicon abusesa was a threat intelligence aggregator that monitored indicators of compromise from various sources and produces highly accurate and actionable events and reports . it ingested well known feeds such as shadowserver abuse.ch zone h malc0de and more . codenomicon abusesa included visualizations of the live data streams which gave security personnel the opportunity to analyze and examine abuse events in real time . history edit codenomicon s founders had been researching and developing fuzzing tools since 1996 . the first ideas for the engine were based on ideas the founders had while working at ouspg where systematic fuzzing was first used to break ascii mime contents in email clients and web services . 2 3 later the same technique was applied to asn .1 structures in such protocols as snmp ldap and x. 509 . 4 5 codenomicon was founded in 2001 . it s defensics product line grew to cover over 250 industry standard network protocols and file formats including wireless interfaces such as bluetooth and ieee 802.11 wi fi . after codenomicon was founded the research side span out into protos genome project . 6 in 2014 codenomicon set up heartbleed.com as a summary and q & a about the openssl heartbleed bug . in 2015 codenomicon was acquired by synopsys inc. codenomicon was also known for having t shirts that say go hack yourself which they usually had at their booth during security conferences . this came from the goal of codenomicon to enable testers and system administrators to find their own zero day vulnerabilities instead of depending on external security consultants and special hacker skills . robustness testing edit robustness testing is a model based fuzzing technique and overall black box testing an extension of syntax testing that systematically will explore the input space defined by various communication interfaces or data formats and will generate intelligent test cases that find crash level flaws and other failures in software . 7 the technique was first described in a university of oulu white paper on robustness testing published in 2000 by kaksonen et al. 8 and licentiate thesis by kaksonen 9 published in 2001 . methodology described in this publication formed an early foundation of fuzz testing engine used by codenomicon defensics . fault injection and specification mutations were other names they used for the same approach . 10 references edit synopsys completes acquisition of software security company codenomicon . synopsys.com . 2015 06 29 . retrieved 2015 08 24 . mime bugs in netscape . the buzz on the bug how does the e mail security bug affect solaris users by stephanie steenbergen sunworld staff . sunsite.uakom.sk . 1998 08 01 . retrieved 2011 11 03 . cert advisory ca 2001 18 multiple vulnerabilities in several implementations of the lightweight directory access protocol ldap . cert.org . retrieved 2011 11 03 . edmund whelan . snmp and potential asn .1 vulnerabilities . december 2002 . sans institute infosec reading room . . retrieved 2011 11 03 . viide j. helin a. laakso m. pietik inen p. sepp nen m. halunen k. puuper r. r ning j. experiences with model inference assisted fuzzing . in proceedings of the 2nd usenix workshop on offensive technologies woot 08 . san jose ca . july 28 2008 . ee.oulu.fi . retrieved 2011 11 03 . lwn security . lwn.net . retrieved 2011 11 03 . kaksonen r. laakso m. takanen a. vulnerability analysis of software through syntax testing . white paper . ouspg 2001 . ee.oulu.fi . retrieved 2011 11 03 . kaksonen rauli . a functional method for assessing protocol implementation security licentiate thesis . published in 2001 by technical research centre of finland vtt publications 447 . 128 p. app . 15 p. isbn 951 38 5873 1 soft back ed . isbn 951 38 5874 x on line ed . . pdf . retrieved 2011 11 03 . kaksonen r. laakso m. takanen a. . software security assessment through specification mutations and fault injection . in proceedings of communications and multimedia security issues of the new century ifip tc6 tc11 fifth joint working conference on communications and multimedia security cms 01 may 21 22 2001 darmstadt germany ; edited by ralf steinmetz jana dittmann martin steinebach . isbn 0 7923 7365 0 . ee.oulu.fi . retrieved 2011 11 03 . external links edit alwayson as an 100 top private company award winner esecurity defend then deploy . codenomicon introduces defensics for wlan codenomicon offers preemptive security and quality testing codenomicon defends against network data storage threats jolt productivity award 2008 dr. dobbs interview with ari takanen fuzzing model based testing and security http www.drdobbs.com security 207000941 dr. dobbs article on automated penetration testing toolkit released based on codenomcion press release http www.drdobbs.com security 224600546 security advisory links edit cert fi advisory on xml libraries cert fi vulnerability advisory on gnutls cve 2004 0786 dos ipv6 uri parsing cve 2004 0081 dos openssl 0.9.6 before 0.9.6 d cve 2014 0160 buffer overreach openssl 1.0.1 before 1.0.1 g heartbleed video links edit fuzz testing and unknown vulnerability management theory and practice on vimeo hands on with codenomicon defensics on vimeo heikki kortti designing inputs that make software fail on youtube retrieved from https en.wikipedia.org w index.php title codenomicon & oldid 730951546 categories computer security companiesprivately held companies of finlandsoftware companies of finlandsoftware testingsoftware testing toolshidden categories pages using infobox company with unsupported parametersarticles which use infobox templates with no data rows navigation menu personal tools not logged intalkcontributionscreate accountlog in namespaces article talk variants views read edit view history more search navigation main pagecontentsfeatured contentcurrent eventsrandom articledonate to wikipediawikipedia store interaction helpabout wikipediacommunity portalrecent changescontact page tools what links hererelated changesupload filespecial pagespermanent linkpage informationwikidata itemcite this page print export create a bookdownload as pdfprintable version languages polski edit links this page was last modified on 21 july 2016 at 22 24 . text is available under the creative commons attribution sharealike license ; additional terms may apply . by using this site you agree to the terms of use and privacy policy . wikipedia is a registered trademark of the wikimedia foundation inc. a non profit organization . privacy policy about wikipedia disclaimers contact wikipedia developers cookie statement mobile view