Ounce in the News

Closing Security Holes with Application Scanners

07/16/2007 Enterprise Systems Journal

Summary
Application security scanners may provide a ton of cures for security vulnerabilities. Our parameters and immediate layers should be well secured, but the problem is that cyber-criminals continue to attack security vulnerabilities at the next frontier: applications. Traditional security code scanning tools cannot stop malicious or vulnerable code from being put into the developed software. With increases in outsourcing and contract programming, companies do not necessarily have the same insight into the security of custom code, and thus the risks of compromised code and security vulnerabilities are also on the rise. The major player in the software security assurance field, Ounce Labs, provides security audit software meant to help organization quickly identify and remediate critical security vulnerabilities before they put their organizations at risk. The product is efficient in code scanning, running 38 million lines of code in 4 hours. Code analysis and web application vulnerabilities scanners must be part of our DNA in software security assurance.

Read full article at Enterprise Systems Journal.

Find out more about application vulnerabilities.