The Path to a Secure Application
A Source Code Security Review Checklist

By Ryan Berg, Co-Founder and Chief Scientist, Ounce Labs

The ongoing epidemic of data breach notifications forced by today's data breach disclosure laws has highlighted the insecurity of many of today's applications. Organizations struggle to ensure their applications are secure and avoid the cost and public relations fallout inherent in issuing numerous security patches, or worse, having to explain how code defects allowed attackers to steal sensitive and perhaps regulated information.

Read this white paper to learn the path to find and eliminate coding errors and design flaws that expose data, threaten operations, and cost your organization time and money.

Get answers to tough questions like:

• Security related functions
• Input/Output validation and encoding errors
• Error handling and logging vulnerabilities
• Insecure components
• Coding errors

About Ounce Labs, Inc.

Ounce Labs' solutions enable organizations to identify, prioritize and eliminate business risk to the enterprise caused by software security vulnerabilities. With Ounce Labs, organizations strengthen application security, protect confidential information and verify compliance with both internal policies and industry mandates such as PCI, FISMA, HIPAA and others.

Ounce Labs' software analyzes application source code to provide the most complete and accurate analysis of application vulnerabilities and their relative priorities, enabling business users and IT professionals to optimize their resources on resolving the most critical issues.

Unique in its ability to scale across an organization's entire portfolio of applications, Ounce is used enterprise-wide by many of the world's most security-conscious organizations, including AT&T, EDS, IBM, Intel, Lockheed Martin, MFS, the U.S. Air Force, the U.S. Government Accountability Office, Unisys and VeriSign.

Led by senior executives with deep enterprise software and security expertise, Ounce Labs is headquartered in Waltham, Massachusetts, with regional offices throughout the U.S. For more information, please visit www.ouncelabs.com.

back to top