The Path to a Secure Application: A Source Code Security Review ChecklistPublished 13th Apr 2009 | Source - OUNCE LABS | Pages - 16
The path to creating a secure application begins by rigorously testing source code for any and all vulnerabilities, to ensure the application will not compromise, or allow others to compromise, data privacy and integrity.
For companies using custom-built, outsourced, or open source applications in-house, ensuring all current and legacy code is secure, however, will be no small challenge. Detecting and eradicating security vulnerabilities has historically been extremely difficult. Many organizations relied on manual code review, which is costly and labor-intensive, as well as penetration testing, which examines only a subset of potential application vulnerabilities in an application.
While both of these approaches have their uses, automatic software vulnerability scanning tools now allow companies to approach secure code development in a more systematic, automated, and successful manner. These automatic vulnerability scanning tools greatly improve the speed and accuracy of code review, and may be integrated seamlessly into the development lifecycle. In fact, the best tools can pinpoint each vulnerability at the precise line of code and provide detailed information about the type of flaw, the risk it poses, and how to fix it.
A whitepaper on how Usha International delivered 80 percent server consolidation and a 70 percent reduction in energy consumption by deploying Dell PowerEdge™ blade servers and a Dell PowerVault™ Tape library.Source Dell
About 61 percent of organizations believe that data theft and cybercrime are the greatest threats to their reputation.Sponsored by IBM
IBM's FlashSystem increases a business' performance by dramatically reducing storage latency.Source IBM