Manage

Manage

Learn to apply best practices and optimize your operations.

• Architectural Risk Analysis -- Chapter 5, Software Security: Building Security In

  Architectural risk analysis plays an essential role in any solid software security program. By explicitly identifying risk, you can create a good general-purpose measure of software security, especially if you track risk over time. So, how do you do... Continue Reading

• Penetration testing versus code review

  Penetration testing and code review both have their advantages. Which application security method is more effective at finding critical vulnerabilities? Continue Reading

• Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Managemen

  Application security should be implemented throughout the Java software development life cycle. Learn how to achieve a secure Java SDLC in this free excerpt from Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and ... Continue Reading

• Exploiting Software: How to Break Code -- Chapter 7, Buffer Overflow

  How does software break? How do attackers make software break on purpose? Why are firewalls, intrusion detection systems and antivirus software not keeping out the bad guys? This book provides the answers. In particular, this free excerpt takes a ... Continue Reading

• An inside look at XML encryption

  At the core of Web services security is the ability to encrypt information sent out as XML documents, using XML encryption. Continue Reading

• Web application security tool: HIVE 3.0

  Web application attacks can be thwarted with Sentryware's HIVE 3.0. The application security tool blocks XSS, SQL injection, buffer overflow and more.Continue Reading

• Source code security scanners: A revamped option for securing custom software

  Automated source code analysis and penetration testing tools allow software makes greater freedom for incorporating application security into their software development life cycles (SDLC).Continue Reading

• Vulnerability assessment: Leave the scanning to someone else?

  Vulnerability assessment is a crucial component of application security. However, Robert Scheier advises readers that vulnerability scans have their limitations.Continue Reading

• Security tool: SecureSphere 2.0

  This anomaly detector from Imperva can help guard against a host of attacks such as XSS and SQL injection. Read more about this security tool.Continue Reading

• Protecting Web applications a paradox for security professionals

  Application security can be difficult to implement. Using the right tools and writing secure programs are good places to start.Continue Reading

• Web app security tools and products find source code vulnerabilities

  Web application security depends upon good coding and good security products. This tip sorts through some of the methods you can use to secure your apps.Continue Reading

• Preventing SQL Injection attacks

  Learn what a SQL injection exploit is, and how to defend yourself. Mike Chapple offers five methods to reduce the possibility of a future SQL injection attack on your applications.Continue Reading

• How to avoid authentication bypass attacks

  Strong authentication methods may not fully protect your applications. George Wrenn offers some tips for avoiding authentication bypass attacks.Continue Reading

• Deal with cross-site scripting

  Cross-site scripting vulnerabilities are a serious problem in application security. Mike Chapple offers basic information an XSS exploit.Continue Reading

• Cross-site scripting: Intro to XSS

  Cross-site scripting vulnerabilities abound. James Michael Stewart gives an overview of XSS.Continue Reading

• Securing Web services: XML firewalls

  Web services are vulnerable to attack. XML firewalls can help keep these applications secure.Continue Reading

• Beware: Security testing tools won't find everything

  Security testing tools can save you countless hours of legwork, but relying too much on them could ultimately weaken your network's defenses.Continue Reading