Automatic Application Vulnerability Assessment
Automated vulnerability assessment can complement manual efforts to find and correct vulnerabilities in application code. In this podcast, Matt Moynahan, CEO of Veracode, discusses key issues in vulnerability testing, including:
What is the process of automated application vulnerability analysis?What types of application vulnerabilities can be detected with automated analysis?
What are the pros and cons of automated analysis as a service?
When analyzing application vulnerabilities, is static analysis sufficient to detect vulnerabilities or are behavior-based techniques required as well?
Many developers are familiar with cross-site scripting and injection attacks, are there others you commonly see when you conduct security reviews?
What do you see as the top challenges to analyzing Web applications, especially within service oriented architectures? How can we analyze the security profile of an application consisting of multiple services on one or more applications servers and querying multiple databases?
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
