Security Management Strategies for the CIOAccess "Application Security: Secure Software's CodeAssure Suite"
This article is part of the November 2005 issue of Comparing five of the top network-based inline IPS appliances
CodeAssure Suite Secure Software Price: Starts at $49,000 for 10 developers @exb CodeAssure Suite is a solid first step to securing source code. @exe Exposed vulnerabilities continue to rise, and Internet worms are still wreaking havoc, but the focus shouldn't stray from the root cause of most Internet-borne attacks--insecure software. Secure Software has created a solid series of tools to remedy most vulnerabilities in insecure source code. Its core CodeAssure Workbench component finds buffer overflows, format string issues, hard-coded clear-text passwords and potentially insecure listening sockets, while CodeAssure Management Center provides a means for reporting on these issues in multiple formats. Make no mistake--Secure Software's CodeAssure Suite is enterprise software for computer scientists and programmers, not security engineers. Installation and integration within the software development lifecycle could take a week or two of planning with a couple days set aside for actual implementation. Workbench ships with approximately 6,000 vulnerability ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
Secure Reads: Contemporary Cryptography
Read a review of the book Contemporary Cryptography.
-
Application Security: Secure Software's CodeAssure Suite
Secure Software's CodeAssure Suite
-
Avoiding Network Traffic Confusion with Consistent Firewall Rules
Keep network traffic flowing by collaborating firewall rules and network access devices.
-
Content Filtering: InterScan Web Security Suite 2.5
Trend Micro's InterScan Web Security Suite 2.5
-
Antispyware: SurfControl's Enterprise Threat Shield 3.0
SurfControl's Enterprise Threat Shield 3.0
-
Firewall VPN
ZyXEL Communication's ZyWALL P1
-
Secure Reads: Contemporary Cryptography
-
-
Hot Pick: SecureWave's Sanctuary Device Control 3.0.1
SecureWave's Sanctuary Device Control 3.0.1
-
E-mail Security Guide for Managers
Staying on top of the latest e-mail threats.
-
Aerial View
Vulnerability tools provide a realistic view of the enterprise, where vulnerabilities are viewed in the context of the IT landscape.
-
Recent Releases: Security product briefs, November 2005
Learn about the security products that launched in November 2005.
-
On the Line
See how five IPS appliances match up against attacks.
-
Hot Pick: SecureWave's Sanctuary Device Control 3.0.1
-
Columns
-
Editor's Desk: An email security guide for managers
Knights of Spamalot
-
Layer 8: SOX security spending is an old, wrinkled tactic
Darned SOX
-
Ping: Katrina's Security Survivors
Katrina's Security Survivors
-
Perspectives: ITIL has application in security
The Information Technology Infrastructure Library (ITIL) is a set of best practices and guidelines for managing IT services can be applied to information security.
-
Editor's Desk: An email security guide for managers
More Premium Content Accessible For Free
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...
Emerging threat detection techniques and products
E-Handbook
Advanced persistent threat (APT) has been a used and abused term in the security industry, but security experts say targeted attacks are a growing ...
The rapid evolution of MDM solutions
E-Zine
Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...