Macromedia Fortifies Its Code to Protect the Digital Experience of Millions of Customers.

Customer Business Profile

Macromedia is motivated by the belief that great experiences build great businesses. Our software empowers millions of business users, developers, and designers to create and deliver effective, compelling, and memorable experiences — on the Internet, on fixed media, on wireless, and on digital devices. With hundreds of millions of enthusiastic customers, Macromedia is clearly the leading enabler of compelling digital experiences.

Security Initiatives

Recent industry research shows malicious users aren’t just targeting security flaws in operating systems and web browsers but are now focusing on other widely used products such as anti-virus software and digital music players. In light of this, Macromedia — with its widely distributed, market-leading products including Flash Player installed on half a billion computers worldwide — knew that it needed the best available application security tool.

Anticipating a continued increase to the number of security threats, Macromedia augmented its strategic application security initiative by procuring state-of-the-art technologies from Fortify Software for use by the Product Security Team.

The Product Security Team is chartered with providing secure architecture advice, developer training and expert security reviews of millions of lines of application code. The team surveyed the market for practical tools to automate the time consuming and complex elements of their manual code review process. They investigated a number of tools employing techniques ranging from binary analysis to source code analysis, both open source and commercially developed.

We found that Fortify Software had a solution that would help us continue to meet our customers’ expectations of a robust and secure experience

Adrian Ludwig Product Security Team Manager

The Product Security Team was looking for a strategic solution that would fit seamlessly into the existing application development lifecycle while having the least amount of impact on development schedules. The solution needed to provide support for numerous programming languages and tools in use by the Macromedia development teams.

After a thorough evaluation of available options, Fortify SCA was chosen due to its ability to meet a number of performance requirements, and also for its unique cross-tier data flow analysis capabilities and comprehensive secure coding knowledge base.

• Key Challenges

  • Increasing number of security threats
  • Large applications
  • Long manual process to review the code

A Better Experience with Fortify SCA

Within hours of installing Fortify's application security tool set, the product security team was reviewing results and finding ways to further increase the robustness of more than a million lines of code. Adrian Ludwig, Product Security Team Manager, says, “Without Fortify SCA, we wouldn’t even try to tackle this magnitude of code. It’s simply too much code with too much complexity.” By investing in a long-term secure coding strategy that addresses the root causes of application security vulnerabilities —including insecure code — Macromedia knows that it will continuously improve the security of its products.

• Fortify Benefits

  • Securing the applications against numerous attacks
  • Actionable results to help fix vulnerabilities efficiently
  • Quick and easy to get up and running

Read more security risk management case studies.