Application Security Assessment

When an organization puts up a web application, they invite the world to send them HTTP requests. Attacks buried in these requests sail past firewalls, filters, platform hardening, and intrusion detection systems without notice because they are inside apparently valid requests. Even “secure” websites that use SSL just accept the requests that arrive through the encrypted tunnel without scrutiny. This means that your web application code is part of your security perimeter. As the number, size and complexity of your web applications increases, so does your perimeter exposure.

Accuvant’s application security assessment offerings are designed to help organizations identify flaws in their custom applications that resist detection from traditional assessment techniques. Accuvant has based its methodology on regulatory requirements and the standards developed by the Open Web Application Security Project (OWASP) Testing Project.

Accuvant offers two different but complementary application assessment approaches. The first is a source code review, which involves a comprehensive analysis of the application’s code to identify flaws that could lead to compromise. The other is application testing, which uses a variety of automated and manual processes to probe a custom application for unique vulnerabilities. The goal of either approach is the same—to identify problems in critical applications so they can be corrected before data is lost, corrupted, or stolen.