Building security during SDLC: IBM’s Appscan Enterprise

Dear Readers, The article I would like to introduce is about IBM's Appscan Enterprise. Introduction: We often talk about securing a web application and discuss tools which can help us identify specific vulnerabilities. However, the problem gets interesting if we need to scale the solution and conduct assessment of web applications at an organizational level; where we need to certify applications every single time there is change in the application code. There are several tools which can help us integrate application security in the SDLC and help us monitor the health of the organization via a dashboard. In this paper, we will be discussing IBM’s Appscan enterprise [1]. Appscan Enterprise IBM’s Appscan enterprise enables organizations to manage and mitigate application security risks and achieve regulatory compliance. As shown below, Appscan enterprise uses dynamic analysis scanner (DAST) to conduct the pen-testing of web-applications & web-services. Similarly, the static source analysis (secure....