You are here: silicon.com > Resources > White Papers > Security > Security Administration > Security Applications

Security Applications White Papers

Web Application Security: Automated scanning versus manual penetration testing

Overview Research has shown that a vast number of Web sites are vulnerable to application attacks, most occurring over HTTP/S protocols. There are two methods to detect Web vulnerability: using manual penetration testing and code review or using automated scanning tools and static analysis. This white paper addresses and compares these two methods.

Further White Paper Details
Publisher	IBM	File Format	PDF
Date Published	January 2008
Format	White Papers
Topics	Security Applications, Security Management, Best Practices, Intrusion Detection Systems, Security Tools, Application Development, Application Security Tools

Did you find this white paper useful? 13 out of 50 users found this white paper useful

MessageLabs - The Dark Art of Spam

Quite simply, MessageLabs anti-spam solution provides businesses with the quality of protection they urgently need if they are to stay a step ahead of the spammers - and the increasingly...

Publisher:
MessageLabs, now part of Symantec

IBM Security Technology Outlook: An outlook on emerging security technology trends

In the next 2-5 years, emerging technology and social trends will have far-reaching implications for enterprise secruity. This white paper will out-line the fundamental technology trends an organisations can expect...

Publisher:
IBM

Not an End In Itself: Information Protection and Return on Risk

Information protection, a core discipline of information stewardship, must balancing rick mitigation with utility. This white paper deals with the shift in "is this technology secure enough" to "we can...

Publisher:
IBM

Trend Micro Enterprise Security white paper

This white paper reviews the content security threat landscape and how it has evolved into a more dangerous and high risk environment. The paper discussed how conventional content security approaches...

Publisher:
Trend Micro

Smart Protection E-Book

"Outthink the Threat: Why conventional protection is no match for new data-stealing malware & the Trend Micro Smart Protection Network is." Discover how cyber criminals are rendering traditional security solutions...

Publisher:
Trend Micro

Slammer time - SQL worm brings net to its knees over weekend

This will prevent external attacks from exploiting the vulnerability. Although a patch has been available since then, many system administrators have failed to install the patch, leaving their computers vulnerable.

Channel:
Security Strategy

Windows hacks available on the net

The center, which tracks attacks and worms by analysing firewall records, indicated that would-be intruders are scanning companies for vulnerable systems, and when they find such systems, they attack.

Channel:
Security Strategy

'Dangerous' Sasser variants already on the loose

The worm spreads by scanning different ranges of internet addresses using a specific application data channel, or port, numbered 445. By Monday morning, Symantec was able to confirm - by scanning for open FTP servers on computers, from which the...

Channel:
Security Strategy

Is penetration testing breaking Herts on the internet?

Hertfordshire County Council has signed a deal with security firm NetSec to run penetration testing on its systems - a process of replicating hacking techniques to test the robustness of security measures in place.

HP to hack its customers

The penetration-testing service, HP Active Countermeasures (HPAC), will use a single server and eight to 10 scanning clients per 250,000 connected devices. Each of the clients will be given a range of IP addresses to scan, and will move through the...

Why you should hack your own systems

Therefore the best practice is to take a multi-tiered approach to testing software applications for security flaws, by using static code and dynamic program analysis along with vulnerability assessment and scanning tools, and penetration testing.

Featured White Papers

Harnessing the Power of Location Intelligence in the Public Sector

Throughout the world, public services today are under pressure. The current economic climate, where taxreceipts are naturally suppressed, provides very seriousfunding challenges. Moreover, in good times and bad, increasing regulation at the regional and national level is imposing additional duties and responsibilities on the public services without additional resources to carry them out. Store closures are changing the urban landscape. Demographic and/or economic change isincreasing demand for health and social services.Demand for decreased crime rates is focusing minds in law enforcement. And the threat of internationalterrorism is forcing greater contingency duties on the emergency services. The net result is a need to do more with lessÂ—quite a challenge.

Publisher:
Pitney Bowes

IBM XIVÂ® Storage System: Power Consumption Reinvented

Reducing power consumption is one of the most significant challenges of IT centers today. With storage needs on a steep rise, it is increasingly clear that new approaches must be explored. This IBM whitepaper shows how, on average, a traditional storage system using mirroring effectively uses less than 21% of its raw capacity, and an XIV system uses approximately 46% of its raw capacity.

Publisher:
IBM

3 Strategies for Reducing IT Support Costs

As companies brace for more bumps in the economic downturn, many organisations are indiscriminately cutting costs. To ensure a seamless transition into the post-recession market, however, slashing and burning is not recommended. Now is the time to strategically trim and strengthen for success. This IDC White Paper explores 3 tangible areas that IT departments should investigate to help strategise cost reduction during the downturn. Download the White Paper to learn: -- Why IT utilisation, end-user support and maintenance budgets are the most strategic areas to investigate -- How to effectively approach cost-saving measures within these areas while maintaining IT performance -- Tools and services the IDC recommends for achieving maximum cost savings and efficiency