| Publisher | IBM | ||
|---|---|---|---|
| Format | Date added | 01 Jan 2008 | |
| Topics | Security Applications, Security Management, Best Practices, Intrusion Detection Systems, Security Tools, Application Development, Application Security Tools | ||
| Downloads | 696 | ||
Research has shown that a vast number of Web sites are vulnerable to application attacks, most occurring over HTTP/S protocols. There are two methods to detect Web vulnerability: using manual penetration testing and code review or using automated scanning tools and static analysis. This white paper addresses and compares these two methods.
Did you find this white paper useful?
26 out of 50 users found this white paper useful
Related white papers
Best Practices in Chosing and Consuming Managed Security Services
Managed Security Service Providers (MSSPs) for some or all of their IT security needs. Companies that are getting the best results from a security performance perspective all use managed security...
Botnets and your Business
This MessageLabs White Paper looks at the botnet threat and how it has evolved into a serious danger to business. It also gives a snapshot of botnet activity based on...
MessageLabs - The Dark Art of Spam
Quite simply, MessageLabs anti-spam solution provides businesses with the quality of protection they urgently need if they are to stay a step ahead of the spammers - and the increasingly...
Staying a step ahead of the hackers: the importance of identifying critical Web application vulnerabilities
Managers work to better manage the risks associated with their business infrastructure. Web application security plays a significant role in achieveing this goal. This white paper deals with issues surrounding...
IBM Security Technology Outlook: An outlook on emerging security technology trends
In the next 2-5 years, emerging technology and social trends will have far-reaching implications for enterprise secruity. This white paper will out-line the fundamental technology trends an organisations can expect...
Not an End In Itself: Information Protection and Return on Risk
Information protection, a core discipline of information stewardship, must balancing rick mitigation with utility. This white paper deals with the shift in "is this technology secure enough" to "we can...
Web application security: automated scanning versus manual penetration testing.
research has shown that a vast number of web sites are vunerable to application attacks, most occur over HTTP/S protocals. There are twom methods to detect web vunerablity . This...
