Topic FAQ's
Highlights include:
- Auditing source code for security vulnerabilities in the development life cycle
- Common techniques for conducting source code audits
- Effectiveness of code auditing techniques
- Conducting code audits for outsourced applications
Highlights include:
- Key components of an application security audit
- Addressing IT risk with application security audits
- Role of application security audits in achieving regulatory compliance
- The Executive's role in assuring application security in the organization and IT security audits
- Application security audits in regulations and best practices frameworks such as:
- Sarbanes-Oxley
- CoBIT
- ISO 17799
- Determining methods and resources to implement security audit in the development lifecycle
Highlights include:
- Causes of application security vulnerabilities
- Identifying applications that could contain security vulnerabilities
- The most common application vulnerabilities that compromise information security
Highlights include:
- Why it is critical for organizations to perform source code analysis on their applications
- Who benefits from source code analysis results in the organization
- Examples of application vulnerabilities that source analysis tools are able to detect
- Benefits of manual source code analysis
- Benefits of automated source code analysis
Highlights include:
- Application security testing and assessment as part of managing software risk
- How to perform an application security assessment
- Procedures for security assessment of applications already in production
Highlights include:
- Building secure programming into application development process
- Using automated code analysis tools as an aid in setting secure programming standards
- Defining responsibility for application security
Highlights include:
- Defining software assurance
- Importance of implementing software assurance for security
- How Ounce software aids in the software assurance process
Highlights include:
- Peer review vs. "security" code review
- Manual code review as a method of reviewing source code for security vulnerabilities
- Building security code reviews into the software development lifecycle
Highlights include:
- How the security of web applications is compromised
- Web application security's role in regulatory compliance
- Technologies available for web application security
- Benefits of implementing web application security early in the development cycle
Highlights include:
- Ensuring source code security within applications
- Achieving source code security with the help of automated source code analysis tools
- Integrating source code security testing into the development process without causing significant delays in the schedule
- Top source code security vulnerabilities
Software Security Assurance Glossary
Glossary covering most common application security terms.
Back to Top