IBM introduces AppScan security tool

With IBM's AppScan application security tool, Vietnamese businesses can self-assess information security situation on the website.

IBM Vietnam Company has cooperated with partners to organize a workshop with the topic ' Secure web application security ' at New World Hotel, Ho Chi Minh City on June 23, 2011. IBM security experts presented the results of global security research X-Force 2010 ; security issues for web applications .

According to Anthony Lim, Director of Rational Security Software, Asia-Pacific region: Currently, hackers often attack the application layer (Application Layer) on websites. Regular firewalls will not be able to protect the website from attacks on applications.

IBM introduces AppScan security tool Picture 1
Mr. Anthony Lim, Director of Rational Security Software, presented the application security solution.

According to the 2010 survey results of Gartner Market Research Company, up to 75% of websites were attacked by hackers in the application group. At the same time, there are about 90% of security holes on the website coming from the application layer; not from the network. Meanwhile, businesses focus on investing in the network to 90% of the budget for IT systems.

Ms. Can Thi Thanh Hai, Rational Product Sales Manager, Software Group - IBM Vietnam said: In order to protect websites, information system managers need to regularly upgrade and download Necessary patches for the software in use on the website. IBM's AppScan has automatic scanning capabilities to detect security errors on websites.

Businesses can choose to purchase the AppScan Standard (standard) version with lower investment costs than the Enterprise version. However, the standard version only allows sequential scanning (security assessment) for each application; All this website has just moved to another website. The AppScan Source version is intended for software development companies only; so that software developers (Developer) evaluate the application before putting it into operation.

The security version of the AppScan Standard application will be suitable for security auditors or QA engineers. IBM Vietnam will advise organizations / businesses in assessing security; AppScan license number needs to buy .

IBM's X-Force Annual Safety Report for 2010 recorded more than 8,000 new security vulnerabilities; 27% increase compared to 2009. Traditional attacks like SQL Injection and Cross-site Scripting are still being used by hackers.