Tag: thinkappsec

Think SQLi is Old News? Attackers Don’t!

What can we do to help developers learn about preventing incidence of SQLi vulns in their production applications? And what can we do about SQLi in legacy web applications or newer apps that were developed with SQLi vulnerabilities? This is a weekly...

Help! Our Dev Team Hates the Software Security Testing Team

How can we foster cooperation to help our Development and Security Teams work together? Often, our dev team hates the software security testing team. What can we do about that? This is a weekly post where we address questions of interest to the...

What is the difference between PCI DSS and PA DSS?

What is the difference between PCI DSS and PA DSS? If I'm not a payment application vendor, what value does the PA DSS have for me? Addressing the top questions of interest to the Application Information Security Community.

Mobile Apps: Which are More Secure Android or iOS?

This is a weekly post where we address questions of interest to the Application Information Security Community. Which Apps are More Secure Android or iOS? Are Mobile Application Reputation Services valuable to Enterprises?

How Can I Secure Apps in the Cloud?

This is a weekly post where we address questions of interest to the Application Information Security Community. How do we secure application vulnerabilities and code development, particularly for mobile and social applications that are built by...