Topics December 12, 2017

Slow and Steady Wins the Application Security Testing Race

3 min read - The Tortoise and the Hare are challenged to develop an app, and the winner must consider both application security and functionality. Who will prevail?

Application Security November 7, 2017

SecDevOps: Putting Security at the Heart of DevOps

2 min read - A SecDevOps cycle can help companies accelerate the development process, reduce code vulnerabilities and bridge the gap between agility and security.

X-Force November 6, 2017

How Not to Store Passwords: SHA-1 Fails Again

3 min read - Symmetric key encryption, password hashing and SHA-1 are all ineffective ways to store passwords during the software development stage.

Application Security October 18, 2017

Five Key IT Security Best Practices to Safeguard Your Expanding Business

6 min read - Owners of small and medium-sized businesses (SMBs) should follow these IT security best practices to protect their data and gain a competitive advantage.

Application Security September 20, 2017

Don’t Sweep Web Application Penetration Testing Under the Rug

3 min read - Although it is one of the most crucial components of any security strategy, web application penetration testing is often neglected.

Application Security August 21, 2017

Three Practical Tips That Empower Developers and Prevent Open Source Security Risks From Entering Your Code

4 min read - There are many benefits to developing software using open source code, but these components can also introduce vulnerabilities into your code.

Application Security August 2, 2017

Integrating the IoT Into Your Application Security Program

3 min read - Is your network prepared to handle the IoT? Start by focusing on your application security program, since many IoT threats lurk in the application layer.

Application Security June 28, 2017

In Case You Missed the Memo: What’s New in IBM’s Application Security Testing?

2 min read - New enhancements to IBM's application security testing solutions enable clients to simplify SAST, remediate open source vulnerabilities and more.

Application Security May 22, 2017

Incorporate Application Security Checks and Balances Into Your Organization’s Citizen Developer Initiatives

3 min read - Citizen developer programs can reduce costs and boost efficiency, but they require heightened vigilance when it comes to application security.

Application Security March 27, 2017

Three Lessons From Test-Driven Development

3 min read - Test-driven development was created to inspire security analysts and developers to reconsider the way they plan, design and test software.