Learn. Research. Get Secure.

Released on December 20th, 2012

Applications are hard to monitor, full of vulnerabilities and easy to manipulate. It's no surprise that applications have become the top vector of attack. But what may surprise IT professionals is what organizations are doing about the risks posed by their web, database, mobile and cloud applications.

What application security policies are emerging in organizations with sensitive data to protect? Read the findings of a new SANS Survey on Application Security Policies in the Enterprise.

Questions of interest include:

• Are any organizations managing their applications securely throughout their lifecycles?
• Who's responsible for application security?
• What are the most critical applications and perceived threats?
• How integrated is organizational application security management with the overall risk management program?

Register and View

Released on October 16th, 2012

Independent report validates Veracode's focus on securing the software supply chain.

Download this 451 Research report for an independent review of Veracode's VAST Program. This report details the importance of understanding the security quality of your software supply chain, the services Veracode offers to manage software supply chain risk, and a SWOT analysis of Veracode's VAST Program.

Register and View

Released on May 15th, 2012

Critical infrastructure has become dependent on complex software applications. The responsibility of ensuring safe and secure functioning of these systems has typically rested solely with critical infrastructure providers. Efforts to secure and defend networks largely consisted of the deployment of defensive technologies, but far less attention was paid to the underlying code that makes applications vulnerable to begin with.

This report from Good Harbor Consulting examines the security advantages and market incentives for developing software applications for critical infrastructure through a security development process.

Register and View

Released on February 24th, 2012

Organizations are having to manage more and more critical software applications to conduct business. These applications may be developed in-house, by an outsourcer or commercially acquired. The vast majority of these software applications will contain flaws which can constitute a security risk.

This report, delivered by the analyst firm Quocirca, looks at how businesses are deploying software and what measures are in place for checking the security of applications. The report draws on new research conducted amongst US and UK enterprises from a range of industries and assesses the scale of the software security problem, the ways in which it can be mitigated, the extent to which this is being achieved, the costs involved and how they can be minimized.

Register and View