4.3.08 Veracode Co-Founder to Heighten Awareness of Backdoor Vulnerabilities at RSA Conference

News & Events

Free Trial callout

Veracode Co-Founder to Heighten Awareness of Backdoor Vulnerabilities at RSA Conference 2008

Who:	Chris Wysopal, Co-Founder and CTO, Veracode, Inc.
What:	RSA Conference 2008
When:	Thursday, April 10, 2008 8:00 a.m. PST
Where:	The Moscone Center 747 Howard Street San Francisco, CA 94103 Green Room 102
Description:	"Locking the Door: Backdoor Threats to Applications" Session Code HT1-301 While other software vulnerabilities have been classified, and processes put in place for detection, backdoors have been largely hidden or neglected. In this presentation, Chris Wysopal, co-founder and chief technology officer of Veracode, will describe a new way to classify backdoors that have been detected in applications. The presentation will provide real-world examples of application backdoors, the mechanisms they use, and strategies for detecting them.
About The Event:	RSA Conference is helping drive the security agenda worldwide with annual events in the U.S., Europe and Japan. Throughout its 17 year history, RSA Conference has consistently attracted the world's best and brightest in the field, creating opportunities for conference attendees to learn about IT security's most important issues through first-hand interactions with peers, luminaries and both emerging and established companies. As the IT security field continues to grow in importance and influence, RSA Conference plays an integral role in keeping security professionals across the globe connected and educated.

For more information on the event, please visit: http://www.rsaconference.com/2008/US/Home.aspx

About Veracode

Veracode is the leading provider of on-demand application security testing solutions. Created by a world-class team of application security experts, the company delivers services to identify software flaws introduced through coding errors or malicious intent. Veracode's core service, SecurityReview uses patented binary code analysis and dynamic web analysis that is uniquely able to inspect entire application inventories, including components, and does not require companies to expose their valuable source code. Enterprises can now protect their intellectual property while preventing attacks allowed by vulnerabilities in applications.

As the most accurate and comprehensive solution, Veracode makes it simple and cost-effective to implement application security best practices and reduce operational costs related to manual reviews. Whether a company is developing applications internally, purchasing software or integrating code from partners, Veracode's SecurityReview provides insight to the security level of your applications. Outsourcing code analysis to Veracode is the easiest way to secure your software. With a pragmatic approach to application security, Veracode helps you fix what matters most to your business.
Based in Burlington, Mass., Veracode is backed by .406 Ventures, Atlas Venture and Polaris Venture Partners. www.veracode.com

Contacts:
Rachel Labas
Lois Paul & Partners
781.782.5787
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it

Site Map | Responsible Disclosure Policy | Privacy Policy | Contact Us

Veracode offers the first on-demand, application security solution that provides automated application security testing through an easy-to-use, software-as-a-service delivery model. By providing code analysis and web application security testing as a service, organizations have no software or hardware to purchase, install, maintain or upgrade.

With Veracode, enterprises can use application security assessment to achieve code security and implement testing into their secure software development life cycle at key development milestones. For enterprises that want to improve SDLC security without sacrificing profitability or competitiveness, Veracode offers SecurityReview®. SecurityReview combines static, dynamic, and manual testing capabilities and scans code after it has been compiled—at the binary level or "byte" code level rather than the source level, as other solutions do. This offers two distinct advantages: One, binary code analysis is more efficient, so vulnerabilities can be found more quickly and with fewer false positives. And two, binary code analysis is the most complete application security testing method because all code can be scanned regardless of origin.

Information on other topics related to application security assurance, dynamic application security testing, XSS, SQL Injection, IT risk management, static code analysis, and offshore development are also available on this site and on the Veracode Blog.