E-Guide: 5 Steps to Achieve Risk-based Application Security Management

This e-guide discusses key obstacles to managing application security risk effectively, and describes 5 easy steps you can follow to implement risk-based application security management in your organization.

Read the e-guide to learn about:

Creating an inventory of application assets and assessing their business impact
Testing applications for vulnerabilities
Determining risks and prioritizing vulnerabilities
Remediating risks
Measuring progress and demonstrating compliance

The guide also summarizes how more effective application security processes can help Security, QA and Development teams to improve collaboration and reduce the threat of potential data breaches. Whether you manage a handful of apps or thousands, this is your how-to guide to mitigate application security risk.

And, to support your application security risk management initiatives, you can test drive our IBM Security AppScan Standard and Application Security Testing on Cloud options free of charge.

Neil Jones

Major Events Content Strategist for IBM Security

PixPirate: The Brazilian financial malware you can’t see

10 min read - Malicious software always aims to stay hidden, making itself invisible so the victims can’t detect it. The constantly mutating PixPirate malware has taken that strategy to a new extreme. PixPirate is a sophisticated financial remote access trojan (RAT) malware that heavily utilizes anti-research techniques. This malware’s infection vector is based on two malicious apps: a downloader and a droppee. Operating together, these two apps communicate with each other to execute the fraud. So far, IBM Trusteer researchers have observed this…

From federation to fabric: IAM’s evolution

15 min read - In the modern day, we’ve come to expect that our various applications can share our identity information with one another. Most of our core systems federate seamlessly and bi-directionally. This means that you can quite easily register and log in to a given service with the user account from another service or even invert that process (technically possible, not always advisable). But what is the next step in our evolution towards greater interoperability between our applications, services and systems?Identity and…

Audio-jacking: Using generative AI to distort live audio transactions

7 min read - The rise of generative AI, including text-to-image, text-to-speech and large language models (LLMs), has significantly changed our work and personal lives. While these advancements offer many benefits, they have also presented new challenges and risks. Specifically, there has been an increase in threat actors who attempt to exploit large language models to create phishing emails and use generative AI, like fake voices, to scam people. We recently published research showcasing how adversaries could hypnotize LLMs to serve nefarious purposes simply…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

More from Application Security

PixPirate: The Brazilian financial malware you can’t see

From federation to fabric: IAM’s evolution

Audio-jacking: Using generative AI to distort live audio transactions

Topic updates