Whitepapers - SC Magazine US
Search the Library
 
Home >

Security

>

Application Security

Application Security encompasses measures taken to prevent exceptions in the security policy of an application or the underlying system (vulnerabilities) through flaws in the design, development, or deployment of the application.

Results 1 - 25 of 52 matches Sort Results By : Published Date | Title | Company name
Stop Spam, Viruses and Spyware: Endpoint and Perimeter Malware Guide
By : Webroot Software Published Date: Feb 27, 2008
IT systems are under constant, increasingly sophisticated attack. Today's cyber criminals are using highly evolved, blended malware to access corporate and customer data at an alarming rate. Additional layers of protection at the perimeter are essential to combat the sheer volume of this increasing threat and to prevent networks from being clogged by spam.
Download Now
Webroot Software
State of Internet Security Report: Protecting Business Email
By : Webroot Software Published Date: Mar 17, 2008
Business dependence on email is greater than ever before and the volume of threats has spiked dramatically. For the SOIS report, Webroot surveyed 1,500 email security product decision makers in companies across seven countries. The report finds that close to 80% of U.S. businesses surveyed experienced a spam attack last year while half also experienced spyware, virus and phishing attacks.
Download Now
Webroot Software
Spyware: A Clear and Present Danger
By : Webroot Software Published Date: Oct 24, 2007
In the past, a virus would tear through computer systems worldwide within days and garner global headlines before an antidote was created and distributed with similar alacrity. Now, silent and far more deadly code is in play, which, if it’s working right, will never be noticed. The new malware is spyware, but it’s not the mere annoyance that first appeared on the scene. In the past several years, spyware has morphed from an irritant into a powerful tool for serious cyber criminals.
Download Now
Webroot Software
Assessing Endpoint Security Solutions- Why Detection Rates Aren't Enough
By : Sophos Plc. Published Date: Mar 04, 2008
Evaluating the performance of competing endpoint security products is a time-consuming and daunting task. Enterprise decision-makers have to rely on independent competitive comparisons, performance benchmarks, and detection certifications, all covering different solutions and criteria, providing conflicting results.
Download Now
Sophos Plc.
Effective Web Policies- Ensuring Staff Productivity and Legal Compliance
By : Sophos Plc. Published Date: Apr 10, 2008
Employees increasingly expect to use the internet at work for their own personal use in return for longer hours, working from home and interrupting vacations. This has a number of security, productivity, bandwidth and legal ramifications that require organizations to create and implement a web usage policy that is backed up by effective web filtering tools.
Download Now
Sophos Plc.
How Can Identity and Access Management Help Me with PCI Compliance While Improving Overall Security?
By : CA Published Date: Dec 31, 2007
PCI Compliance has become a business requirement for any company involved in the processing of credit card information. It requires strong security controls over all systems and applications that process or store cardholder information. These controls serve to manage vulnerabilities and to control access to all confidential information.
Download Now
CA
Meeting the PCI Application Security Requirements: Building Compliance In
By : Ounce Labs Published Date: Nov 15, 2007
The PCI DSS is demonstrably becoming a de facto standard of due care for any organization responsible for the privacy and integrity of data. The increased focus on application security in the latest revisions of the PCI DSS can be traced directly to many of the recent high profile breaches, where insecure applications have proved to be the point of access for hackers, and the source of data loss.
Download Now
Ounce Labs
On-Demand Vulnerability Management
By : Qualys Published Date: Aug 08, 2006
Learn how to start your own self-auditing process by setting goals and answering key questions about your infrastructure. This podcast examines what to look for in a self-audition solution, how to use vulnerability management to ease the pain and why your software solution really matters.
Download Now
Qualys
Secure at the Source: Implementing Source Code Vulnerability Testing in the Development Life Cycle
By : Ounce Labs Published Date: Jul 05, 2007
Organizations should implement source code analysis tools as part of the software development life cycle to find and fix the highest number of security issues early in the project. This will result in a higher-quality product and lower overall application life cycle costs. Countless studies and analyst recommendations suggest the value of improving software security during the development life cycle (SDLC) rather than trying to address security vulnerabilities in software discovered after widespread adoption and deployment.

Download Now
Ounce Labs
Software Security Governance in the Development Lifecycle
By : Ounce Labs Published Date: Mar 24, 2008
There are many key drivers for application security, such as managing the high levels of complexity in rapidly changing IT environments as well as regulatory and compliance demands. With recent high profile breaches and their consequences in the headlines, the direct line between insecure software and data insecurity has never been more clear. As a result, organizations with a strong commitment to data integrity and privacy are taking concrete, measurable steps to ensure the software systems that control data are developed securely.
Download Now
Ounce Labs
The Path to a Secure Application: A Source Code Security Review Checklist
By : Ounce Labs Published Date: Jul 05, 2007
The path to application security begins by rigorously testing source code for any and all vulnerabilities, to ensure the application will not compromise, or allow others to compromise, data privacy and integrity. This paper outlines the steps to secure source code development practices, and presents a source code security review checklist.
Download Now
Ounce Labs
Trust, But Verify: How to Manage Risk in Outsourced Applications
By : Ounce Labs Published Date: Sep 11, 2007
This paper will discuss the need for addressing security concerns in outsourced applications, outline a framework for addressing those concerns, explore the role of source code review to assess and certify outsourced applications, and provide a sample contract addendum for including secure code requirements in RFP's and outsourcing contracts.
Download Now
Ounce Labs
The Right Tool for the Right Job: An Application Security Tools Report Card
By : Ounce Labs Published Date: Apr 01, 2008
During the 80s, war dialing and phone phreaking were the attacks that garnered all the headlines. In the 90s it was all about web defacement and the ubiquitous email virus. The last seven years have given rise to identity data theft and privacy concerns. For the past twenty years, organizations have focused on protecting the network; but in the last ten years it has become clear that the core threat is not, nor really ever was, access to the network.
Download Now
Ounce Labs
Top Security Vulnerabilities in Web 2.0 Applications
By : HP Published Date: Oct 19, 2007
Web 2.0 applications can be more vulnerable to exploitation by hackers than their predecessors. When Web 2.0 applications push functionality and code to users, they provide hackers with information that can be used for formulating attacks. This white paper defines some of the common technological components of Web 2.0 applications and discusses ways of securing them against exploitation.
Download Now
HP
Web Application Security: Too Costly to Ignore
By : HP Published Date: May 20, 2008
Web application security is crucial to mitigating the risks of attack and attaining regulatory compliance.  The number of web attacks is on the rise and is exponentially more cost effective to remedy those flaws early in the development process.  There is an enormous chasm between where application security should be and the sad shape of application security today.
Download Now
HP
The Value of Enterprise SSO to HIPAA Compliance
By : Imprivata Published Date: Nov 02, 2005
When the U.S. Congress passed the Health Insurance Portability and Accountability Act (HIPAA) of 1996, among the law's many provisions was the establishment of formal regulations designed to protect the confidentiality and security of patient information. In addition to mandating new policies and procedures, the HIPAA security regulations require mechanisms for controlling access to patient data on healthcare providers' information technology (IT) systems.
Download Now
Imprivata
What's Missing from SEM? Security Management is More than Event Management
By : NetIQ Corporation Published Date: Jan 10, 2007
This white paper identifies what is required for a comprehensive and integrated security management solution and examines the difference between SEM, SIM and SIEM and the challenges of enterprise level security monitoring.
Download Now
NetIQ Corporation
Fresh Approaches to Solving the Malware Problem
By : Secure Computing Published Date: Nov 01, 2006
Organizations need to be protected from both known and unknown threats, and all the varieties and forms that sophisticated malware can take.  Learn about the changing nature of malware attacks and how the Webwasher Anti-Malware from Secure Computing can provide a highly effective defense against malicious content.
Download Now
Secure Computing
GoToMeeting Security White Paper
By : Citrix Online Published Date: Jan 31, 2008
This document provides a technical description of the security features built into GoToMeeting. It has been written for technical evaluators and security specialists who are responsible for ensuring the safety of their company’s network and the privacy and integrity of business communications.
Download Now
Citrix Online
Information Security Obligations Under UK Law
By : PassGo Published Date: Oct 21, 2005
The law in the United Kingdom has various influences on organizational information security policy. As well as protecting the rights of individuals and organizations, it also imposes many duties and responsibilities. For organizations to meet their legal obligations a number of technical controls can be put in place.
Download Now
PassGo
Identifying & Thwarting Malicious Intrusions
By : MX Logic Published Date: Apr 24, 2008
Rootkits, Trojans, ransomware, Denial-of-Service and much more – this newly released white paper from MX Logic covers the everchanging security threat landscape. Learn what malicious intrusions are out there, how to identify them and how to keep your network safe.

Download Now
MX Logic
Leveraging Automation to Quickly Reveal Vulnerabilities
By : Cenzic Published Date: Nov 30, 2005
With web applications constantly evolving, finding vulnerabilities is a challenging, costly and time-consuming undertaking.  Find out how Cenzic's powerful security solutions help information security teams quickly identify problems, regularly assess web application security strength and ensure regulatory compliance.
Download Now
Cenzic
PKWARE Enterprise Security and Compression Solutions
By : PKWARE Published Date: Oct 26, 2005
The Butler Group provides a technology audit on PKWARE's SecureZIP cross-platform data file security software.
Download Now
PKWARE
Protecting Client Systems from the Crimeware Invasion
By : Symantec Published Date: Aug 30, 2006
The IT threat landscape has changed from individual hackers disrupting network operations to organized crime stealing confidential information. Antivirus technology must be joined by a coordinated, multilayered defense that includes proactive vulnerability-based intrusion prevention, file-based intrusion prevention, and inbound and outbound traffic control.
Download Now
Symantec
Preventing Your Next Microsoft Exchange Outage
By : AppAssure Software Published Date: Apr 25, 2008
Messaging has rapidly become the one, true business critical application in use today by many, probably most, enterprises. Even more so than Enterprise Resource Planning or other cross-business applications, any failure in the messaging system is noticed by, and affects everyone. If a person cannot get an e-mail to or from another person then they are immediately in contact with the help desk to report the problem. Users are far less inclined to be forgiving when it comes to an e-mail outage; they just expect it to work.
Download Now
AppAssure Software
 
Results 1 - 25 of 52 matches Sort Results By : Published Date | Title | Company name
Home >

Security

>

Application Security

<< Start < Previous 1 2 3 Next > End >>

More Security Topics
Access Control, Anti Spam, Anti Spyware, Anti Virus, Application Security, Auditing, Authentication, Biometrics, Business Continuity, Compliance, DDoS, Disaster Recovery, Email Security, Encryption, Firewalls, Hacker Detection, High Availability, Identity Management, Internet Security, Intrusion Detection, Intrusion Prevention, IPSec, Network Security Appliance, Password Management, Patch Management, Phishing, PKI, Policy Based Management, Security Management, Security Policies, Single Sign On, SSL, Secure Instant Messaging, Web Service Security
SUBSCRIBE FORM
Receive an email alert whenever new research is added into:
Application Security
Enter your email below:

RELATED TOPICS
Access Control
128 Documents
Authentication
88 Documents
Biometrics
2 Documents
Business Continuity
82 Documents
DDoS
5 Documents
Disaster Recovery
90 Documents
Email Security
137 Documents
Encryption
47 Documents
Firewalls
38 Documents
Hacker Detection
56 Documents
Identity Management
87 Documents
Internet Security
134 Documents
Intrusion Detection
53 Documents
Intrusion Prevention
104 Documents
Network Security
185 Documents
Network Security Appliance
39 Documents
PKI
9 Documents
Password Management
39 Documents
Security
214 Documents
Security Management
169 Documents
Vertical Search
1 Documents

Search the Library
This Weeks Most Popular Reports Most Popular Topics Vendor Directory
Network Security Research                                                                                                
Learn about lead generation opportunities and list your white papers

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions

3.0186040401459