Watchfire Reports Big Picture on Potential Web Flaws
By Jennifer deJong
March 1, 2006 —
Watchfire has readied a new edition of its security offering, aimed at teams that need to test many Web applications simultaneously.
The Waltham, Mass.-based company announced last month AppScan Enterprise. Unlike its companion offering, AppScan 6.0, which the runs on the developer’s desktop, the enterprise edition runs on a server and provides a Web-based user interface. “It can point at 100 applications at once,” said David Grant, Watchfire’s director of product management and marketing. “As a developer, I don’t have to run the scan myself,” he said. Developers and other team members view reports that show, for example, whether buffer overflows are trending up or down, he said.
Both AppScan offerings are called black-box testing, or simulation, tools. They identify potential vulnerabilities in
Web applications by simulating attacks a hacker might launch. In a buffer overflow, for example, a hacker inserts oversize character strings designed to overflow the system’s memory buffer, exposing the application.
In order to maintain performance when tackling multiple apps, AppScan Enterprise, which starts at US$90,000, uses multiple agents to scan different parts of an application simultaneously. Also new is the ability to “get through JavaScript code in order to get to other parts of the application,” said Grant. JavaScript code is typically difficult to scan, and often results in a roadblock, he said.
AppScan Enterprise, which works with Oracle or Microsoft SQL Server databases, also lets teams prioritize reports to show which vulnerabilities are most important to address, said Grant.
Share this link: http://sdt.bz/29171
Most Read Latest News Blog Resources
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
|
|
Illumination Software Creator 4.2 adds 'Portal Blocks'
Radical Breeze today released version 4.2 of Illumination Software Creator for Linux, MacOS X and Windows
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
|
|
Xceed releases UX-focused suite for Microsoft’s WPF
"Blendables" helps match user experiences to developer visions
|
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
|
|
Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
|
|
RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
|
|
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
|
The Hidden Costs of Software Licensing
Moving beyond paper-based software licensing to more flexible, software-based licensing is a business decision. There is a growing trend tow...
|
|
Case Study: You May Need a Development Mechanic
As a contractor for a major financial player in Germany, SOBEGE, a German-based consultancy specializing in embedded IT and web services, wa...
|
|
Ensuring Software Quality at a Major International Bank
One of the world’s leading international banks has adopted AgitarOne technology for delivering generated unit tests for their Java software...
|
|
Load Testing Adobe Flex Applications
Adobe Flex applications may be different from applications you’ve worked with before. For classic HTML web applications, the server does all...
|