Rational AppScan Standard Edition

Features and benefits

IT auditors and compliance officers are looking for a process to test Web application security controls so that their Web applications are not exposed to vulnerabilities that can be exploited by hackers. AppScan® Standard Edition automates vulnerability testing, so customers can integrate security testing into the Web application development process for new or existing applications.

IBM Rational AppScan Standard Edition is an industry-leading Web application security testing solution that includes both 1.) Dynamic analysis to test for all common web application vulnerabilities, and 2.) Static analysis of JavaScript to identify client-side vulnerabilities.

• Identifies web application vulnerabilities including all relevant WASC TCv2 threat classes, such as SQL-Injection, Cross-Site Scripting and Buffer Overflows
• Applies static taint analysis with JavaScript Security Analyzer to identify client-side security issues, such as DOM-based cross site scripting, code injection, Open Redirect, CSRF Bypass, Dual Session, Port Manipulation and Protocol Manipulation
• Provides broad application coverage for Web 2.0/Rich Internet Applications with support for AJAX, Adobe Flash/Flex, etc.
• Includes enhanced support for Web Services and Service Oriented Architecture including SOAP and XML
• Includes advanced testing utilities to expand custom security testing by combining the power of AppScan with Pyscan scripts for more powerful and more efficient manual testing
• Generates advanced remediation capabilities including a comprehensive task list to ease vulnerability remediation
• Simplifies security testing for non-security professionals by building scanning intelligence directly into the application
• Features over 40 out-of-the-box compliance reports including PCI Data Security Standards, ISO 17799, ISO 27001, Basel II, SB 1386 and PABP (Payment Application Best Practices)
• Simplified scan results through the new Results Expert wizard, further simplifying the process of interpreting scan results through scan-specific descriptions and straight forward explanations of each issue
• Integrates with defect tracking systems, such as Rational ClearQuest and HP Quality Center

Oracle Fighting to Keep Linux Open and Free 30/08/2023

Oracle has just released a statement by...