• 

  Do insecure open source components threaten your apps?

  Since Apache Maven, the brainchild of Sonatype founder Jason van Zyl, emerged as a top-level Apache Software Foundation project in 2003, the Central Repository has become a primary source of open source components. Jackson says the Central Repository receives four billion requests per year for its 300,000 components.

  By Thor Olavsrud | 31 March, 2012 10:01

  Tags: Access control and authentication, Apache Software Foundation, application development, application security, governance, IT Organization, open source, security, software, vulnerability

• 

  Streaming vs. proxy deep packet inspection

  This vendor-written tech primer has been edited by Network World to eliminate product promotion, but readers should note it will likely favor the submitter's approach.

  By Patrick Sweeney, vice president of product management and corporate marketing, SonicWALL | 27 March, 2012 07:23

  Tags: Access control and authentication, anti-malware, application security, App Security, deep packet inspection, DPI, enterprise social networks, proxy-based DPI, security, stream-based DPI, wnterprise mobility

• 

  Developers say application security lacking

  Are enterprise applications really secure? It depends on whom you ask.

  By Brandon Butler | 21 March, 2012 02:47

  Tags: Access control and authentication, application security, Gap, it management, IT security controls, mobile apps, networking, Ponemon Institute, regulatory compliance, security, wireless

• 

  Making sense of mobile device, app, and information management

  Smartphones, tablets, social networks, and cloud services are all popular, incredibly useful -- and a security risk. These days, the security focus is on mobile devices, as they tend to be used a lot to work with corporate information, but the variety of platforms, the fact many are employee-owned, and uneven security capabilities all add up to a real -- sometimes impossible -- challenge to manage them in the same way as the corporate PC.

  By Galen Gruman | 01 March, 2012 01:46

  Tags: Access control and authentication, application security, byod, consumerization of IT, Data Loss Prevention, data protection, data security, Endpoint Protection, freemium, mobile apps, mobile device management (MDM), mobile technology, security

• 

  Oracle hedging its vulnerability reports?

  Oracle may be subtly misleading customers about the severity of some of the vulnerabilities found in its database software, according to researchers from database security software provider Application Security (AppSec).

  By Joab Jackson | 28 April, 2011 02:43

  Tags: application security, Compliance monitoring, Exploits / vulnerabilities, oracle, patches, Patch management, security

Whitepapers about application security

• 

  Top 5 Myths of Safe Web Browsing

  There are a lot of misconceptions out there about safe web browsing. You might think you're being safe. But without the facts it’s next to impossible to stay protected against today’s changing threats. In this paper we describe the top five myths of safe web browsing, what the facts really are, and what you can do to stay secure.

• 

  Conquer application management challenges