Application Security May 18, 2017
By Neil Jones < 1 min read

Your management of modern-day application security vulnerabilities can be compared to a sheriff enforcing law in a frontier town in the American West. In the blink of an eye, new application security risks can roll into town, with high potential risk to your organization and little predictability. In addition, modern technology makes it more challenging to differentiate between the “good cowboys” in white hats from the “bad cowboys” in black hats.

With 57% of organizations deploying open-source software in their production environments, there needs to be a new sheriff in town: You.

Armed with IBM Application Security Open Source Analyzer, you can wrangle the maverick code contained in your organization’s open source components by automating security testing and configuring your scanning activity. As such, Open Source Analyzer permits you to gain control and visibility over your open source risk  by continuously identifying vulnerable open source components in your software.

Open Source Analyzer is a key component of IBM’s Application Security on Cloud solution. Application Security on Cloud also enables you to conveniently and efficiently perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and mobile application security testing for iOS and Android applications, all in the Cloud.

 

Learn more about the critical importance of open-source application security testing and register for a complimentary trial to test-drive IBM Application Security on Cloud today.

Start Your Free Trial Now

Neil Jones
Major Events Content Strategist for IBM Security

Neil currently serves as Major Events Content Strategist for IBM Security. He possesses more than 15 years of experience in the IT security space, and has wo...

More from Application Security
Application Security   April 5, 2023

X-Force Identifies Vulnerability in IoT Platform

4 min read - The last decade has seen an explosion of IoT devices across a multitude of industries. With that rise has come the need for centralized systems to perform data collection and device management, commonly called IoT Platforms. One such platform, ThingsBoard, was the recent subject of research by IBM Security X-Force. While there has been a lot of discussion around the security of IoT devices themselves, there is far less conversation around the security of the platforms these devices connect with.…

4 min read
Software Vulnerabilities   March 21, 2023

Patch Tuesday -> Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock (afd.sys) in 24 Hours

12 min read - ‘Patch Tuesday, Exploit Wednesday’ is an old hacker adage that refers to the weaponization of vulnerabilities the day after monthly security patches become publicly available. As security improves and exploit mitigations become more sophisticated, the amount of research and development required to craft a weaponized exploit has increased. This is especially relevant for memory corruption vulnerabilities.Figure 1 — Exploitation timelineHowever, with the addition of new features (and memory-unsafe C code) in the Windows 11 kernel, ripe new attack surfaces can…

12 min read
Intelligence & Analytics   February 21, 2023

Backdoor Deployment and Ransomware: Top Threats Identified in X-Force Threat Intelligence Index 2023

4 min read - Deployment of backdoors was the number one action on objective taken by threat actors last year, according to the 2023 IBM Security X-Force Threat Intelligence Index — a comprehensive analysis of our research data collected throughout the year. Backdoor access is now among the hottest commodities on the dark web and can sell for thousands of dollars, compared to credit card data — which can go for as low as $10. On the dark web — a veritable eBay for…

4 min read
Software Vulnerabilities   February 21, 2023

Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers

17 min read - Overview In this post, IBM Security X-Force Red offensive hackers analyze how attackers, with elevated privileges, can use their access to stage Windows Kernel post-exploitation capabilities. Over the last few years, public accounts have increasingly shown that less sophisticated attackers are using this technique to achieve their objectives. It is therefore important that we put a spotlight on this capability and learn more about its potential impact. Specifically, in this post, we will evaluate how Kernel post-exploitation can be used…

17 min read
© 2023 IBM Contact Privacy Terms of use Accessibility Cookie Preferences
Sponsored by si-icon-eightbarfeature