SDK: Guardium SDK for neighborhood security?

https://securityintelligence.com/neighborhood-watch-uniting-the-data-security-community-through-software-development-kits/

Quoting:
"A Neighborhood Watch for the Data Security Community

Today, there are four use case categories of interest for which we are prompting business partners to build apps: risk discovery and classification, new data sources and platforms supported for data protection, big data aggregation and analytics, and industry-focused compliance solutions. These four use cases can be addressed in a variety of ways.

For example, apps can be built to present a combination of internal and external data in tables or visualizations. They can also integrate data from external products or services for better analytics and/or compliance. In addition, apps can be built to host security rules or highlight anomalous activities and send reports to an external source.

The final piece of the puzzle is the skills and expertise of the business partners and developers themselves. Without collaboration from those who are looking for new challenges and innovative ways to contribute to the data security community at large, we can’t move forward. Much like the Neighborhood Watch, the security world needs to band together as a community to ensure that data privacy and security principles are upheld.

So what are you waiting for? To get started, download the Guardium SDK."

More info:

https://exchange.xforce.ibmcloud.com/hub/extension/cd46ff5905e6709be66ab814da9eabb4?cm_mc_uid=78223798062015236497989&cm_mc_sid_50200000=44250091523649799017

Quoting:
"IBM X-Force Exchange is a threat intelligence sharing platform that you can use to research security threats, to aggregate intelligence, and to collaborate with peers.

Logged in users have integrated access to all the functionality of the site: searching, commenting, Collections and sharing. Guests can search and view reports only."

TOOL: IBM Rational Logiscope (Static Analysis, Dynamic Testing)

FFR:

IBM Rational Logiscope is (amongst other things) a static analysis tool for C, C++, Java, and Ada.

Quoting:

"IBM Rational Logiscope tackles software quality head-on, providing a comprehensive suite of highly customizable static and dynamic testing tools to ensure that:

1. Latent bugs and faulty constructs are detected and eliminated
2. Software complies with required coding standards, whether they are personal standards, internal standards, or industry standards such as MISRA.
3. Complex and error-prone areas of code are identified at the earliest stage and corrective actions are taken.
4. Code review is automated and effort is focused on problematic area helping you adopt verification processes that are described by international standards such as SEI/CMMi, ISO/IEC 9216 and 9001, DO-178B, IEC 61508, EN 50128.
5. Unnecessary duplicated code blocks are identified and removed, therefore optimizing your testing effort and maintenance effort over time.
6. Testing is both comprehensive and efficient by identifying untested pieces of code. "

(...)

"The proven verification capabilities of IBM Rational Logiscope help you optimize expensive development resources to reliably deliver on-time, on-budget, and to specification.

IBM Rational Logiscope currently supports four programming languages: C, C++, Java, and Ada. It is available on Windows, UNIX, and Linux platforms and includes four different products:

• IBM Rational Logiscope RuleChecker, for code rule checking
• IBM Rational Logiscope QualityChecker, for code quality metrics
• IBM Rational Logiscope Code Reducer, for finding code similarities
• IBM Rational Logiscope TestChecker, for dynamic test coverage analysis

IBM Rational Logiscope RuleChecker V6.6 introduces support for MISRA C++ code rules checking, allowing organization to comply with this industry-standard set of rules. IBM Rational Logiscope RuleChecker now allows verifying MISRA code rules on code generated by IBM Rational Rhapsody."

Security: Forrester 2017 Security Analytics Report (and the IBM product in that area QRadar)

Forrester 2017 Security Analytics Wave (with link to download this first  Forrester report):
https://securityintelligence.com/qradar-waves-from-the-leader-position-in-the-forrester-2017-security-analytics-wave/

Quoting:
"Forrester just published its first ever Security Analytics Wave. IBM Security is proud to hold a top right position, with the highest scores in solution strength and vision of all the evaluated products.

Forrester developed and applied a 36-criteria evaluation of security analytics (SA) providers and, as a result, identified the 11 top providers. Of those 11, IBM was rated as a leader in the evaluation."
(...)
"Security Analytics Deconstructed

SA can mean a lot of things to a lot of people, but IBM believes it has to have a few core components, which are in lockstep with some of the components identified in the Forrester Security Analytics Wave. These components include user and entity behavior analytics, real-time and historical threat detection, big data capabilities, threat intelligence, and security automation and response."