Threat modeling

NEWS: 1 - 3 of 17

	Application security shouldn't involve duct tape, Band-Aids or bubble gum SearchSoftwareQuality.com | 15 May 2007 ARTICLE - By applying a multilayered approach to application security throughout the SDLC, software ships more securely, closer to the scheduled delivery date and closer to anticipated cost.

	Top Web application security threats for 2007 SearchSoftwareQuality.com | 07 Dec 2006 ARTICLE - Web application threats increased significantly in 2006, and they aren't expected to let up. SPI Dynamics identifies which Web trends will be security concerns in 2007.

	One simple rule to make your Web apps more secure SearchSoftwareQuality.com | 19 Oct 2006 INTERVIEW - SPI Dynamics' Caleb Sima recommends developers focus on input validation as a top priority against threats to Web application security, such as SQL injection and XSS.

	VIEW ALL NEWS ON THREAT MODELING

EXPERT TECHNICAL ADVICE: 1 - 3 of 54

THREAT MODELING EXPERTS
			Dan Cornell principal, Denim Group ASK A QUESTION

	The essentials of Web application threat modeling Submitted By: SearchSoftwareQuality.com | 24 Mar 2008 TIP - A critical part of Web application security is mapping out what's at risk -- or threat modeling. Kevin Beaver outlines the essential steps to get you started.

	How to implement security in Java EE and Java ME 18 Jul 2007 EXPERT ANSWER - Web application security in Java EE and Java ME is aided by security architectures inherent in each platform. Expert Ramesh Nagappan explains how to understand these architectures and use them to achieve Java security.

	Protection against "zero-minute" exploits Submitted By: SearchAppSecurity.com | 11 Jan 2007 TIP - The gap of time between a vulnerability's discovery and an attack on that vulnerability is shrinking. Amir Peles delves into "zero-minute" exploits and offers a plan for defense.

	VIEW ALL EXPERT TECHNICAL ADVICE ON THREAT MODELING

REFERENCE & LEARNING: 1 - 3 of 11

	Web application security -- How to prevent attacks 20 Aug 2008 ALL-IN-ONE GUIDES - The battle against hackers is a difficult one. This guide introduces you to popular Web application attacks and provides tips, techniques and advice for keeping the bad guys out.

	Web application security and the PCI DSS SearchSoftwareQuality.com | 03 Jul 2008 LEARNING GUIDE - Software security should be integrated into the software development lifecycle. The PCI DSS can't account for all this, so here is advice to get you started on a holistic approach.

	Stop SQL injection attacks on applications 07 Feb 2006 FEATURED TOPIC - SQL injection attacks have been known to take down many Web sites and applications. What can you do to protect against these attacks? Learn more in these articles and tips.

	VIEW ALL REFERENCE & LEARNING ON THREAT MODELING

WEBCASTS: 1 - 2 of 2

	Web attacks and how to defeat them - Expert Webcast VIEW WEBCAST PREMIERED:   08 JUN 2005, 09:00 EDT (13:00, GMT) SUMMARY:   Take an in-depth look at how Web sites are attacked and how to reduce the likelihood that an attack is successful.

Simplify Your Security Decision - Vendor Webcast VIEW WEBCAST PREMIERED:   05 OCT 2004, 12:00 EDT (16:00, GMT) SUMMARY:   Today's security threats are more sophisticated, frequent and dangerous than ever before. Traditional antivirus and firewall point products are no longer capable of providing adequate protection. Learn how to simplify this decision with a unified, proactive approach to internet security.

	VIEW ALL WEBCASTS ON THREAT MODELING

DOWNLOADS: 1 - 1 of 1

	Injection attacks -- Knowledge and prevention Published by: SearchAppSecurity.com | 31 Oct 2006 PODCASTS - SQL injection is a major threat to application security, but what of other injection attacks? Caleb Sima dissects these exploits and offers astute prevention tips in this podcast.

	VIEW ALL DOWNLOADS ON THREAT MODELING

BEST WEB LINKS: 1 - 1 of 1

	White Papers: How to protect against SQL injection and other application attacks SearchAppSecurity.com | 07 Feb 2006 RESOURCE GUIDE - Fortunately, there are steps you can take now to prevent SQL injection and other attacks on your applications.

	VIEW ALL BEST WEB LINKS ON THREAT MODELING

	SEE ALSO - Topics Related to Threat modeling:  Software requirements techniques (Prototyping, Storyboards, Modeling, State transitions), Use cases and misuse cases, Software requirements tools, Building security into the SDLC (Software development life cycle), Software Requirements Documentation