Cisco ASA 5500 Series by Cisco Systems, Inc.. The Cisco® ASA 5500 Series Business Edition is an enterprise-strength comprehensive security solution that combines market-leading firewall and optional content security capabilities, more... >> Discover more offerings from Cisco Systems, Inc..

Controlling Software Complexity: The Business Case for Static Source Code Analysis by Coverity March 19, 2008 - (Free Research) This white paper discusses how static source code analysis can be used to find critical defects and security vulnerabilities in C/C++ and Java source code.  (WHITE PAPER) READ ABSTRACT |

IT Risk Management: Guide to Software Risk Assessments and Audits by Veracode, Inc. June 07, 2010 - (Free Research) Risk is a function of the likelihood that a potential vulnerability will be exploited, and the resulting impact of that exploitation. In IT systems, risk can be introduced from the internet, servers, networks, malicious insiders, and even lapses in physical security. This whitepaper provides IT risk management best practices.  (WHITE PAPER) READ ABSTRACT |

How They Do It in Switzerland…Outsource the Code, Insource the Quality: McCabe IQ Analyzes and Visualizes Software Quality in Critical International Financial Systems by McCabe Software, Inc. April 19, 2012 - (Free Research) <p>Given the competitive marketplace, evaluating source code analysis tools can be overwhelming. This case study highlights one recommended offering, the quality indicators it provided, and the results one organization achieved after implementing it.</p>  (CASE STUDY) READ ABSTRACT |

Embedded Open Source Analysis by Klocwork April 2008 - (Free Research) This white paper explores the results from an analysis of multiple open source projects that are commonly used in embedded development.  (WHITE PAPER) READ ABSTRACT |

Code Signing Debacle 2.0: A Hacked Adobe Server and Its Impact on Us All by Lumension May 2013 - (Free Research) Watch this webinar to learn about the threat of hacked vendor software, the technologies and controls that can help address the risk of compromised code signatures and infrastructures, and how to preemptively address these vulnerabilities.  (WEBCAST) READ ABSTRACT |

The Next Generation of Static Analysis: Boolean Satisfiability and Path Simulation by Coverity March 2008 - (Free Research) This white paper will provide a brief overview of the history of static analysis and explain how the use of SAT in static analysis is enabling developers to improve the quality and security of their code.  (WHITE PAPER) READ ABSTRACT |

Core IMPACT Essential by Core Security Technologies January 2009 - (Free Research) How do you keep up with remediation efforts and strengthen your defenses against round-the-clock threats while still having time to do your day job? CORE IMPACT Essential can help.  (PRODUCT DEMO) READ ABSTRACT |

Introduction to Secure Coding for C/C++ by Klocwork September 2011 - (Free Research) When budgets, customers and reputations are at stake, software developers need every available tool to ensure that applications and code are as secure as possible. Going a step above and beyond, this interactive online learning center provides detailed lessons for securing C/C++ code.  (RESOURCE CENTER) READ ABSTRACT |

Minimizing Code Defects to Improve Software Quality and Lower Development Costs by IBM March 2009 - (Free Research) This paper talks about why it's important to take a proactive approach to improving overall code quality using static and dynamic analysis. It then shows how IBM Rational Software Analyzer and IBM Rational PurifyPlus software can be used together to reduce the number of defects in your company's code.  (WHITE PAPER) READ ABSTRACT |

Software Security Analysis: Control Flow Security Analysis with McCabe IQ by McCabe Software, Inc. April 2012 - (Free Research) <p>Read this white paper to learn how comprehensive security analysis equips you with the proper insight into the structure of your software code to identify and resolve possible security holes</p>  (WHITE PAPER) READ ABSTRACT |

Five Steps to Secure Outsourced Application Development by Veracode, Inc. May 2010 - (Free Research) Application security has become a top concern for security professionals striving to control their company’s overall risk profile. Meanwhile, companies are also saving money by outsourcing more and more custom code creation. This white paper outlines five best practices that enterprises can use to secure their outsourced application development.  (WHITE PAPER) READ ABSTRACT |

The Total Economic Impact of CA Identity Manager by CA Technologies. February 2010 - (Free Research) In January 2010, CA commissioned Forrester Consulting to examine the total economic impact and potential return on investment (ROI) enterprises may realize by deploying CA Identity Manager (CA IM). Read this paper to learn what they found.  (WHITE PAPER) READ ABSTRACT |

E-Book: Technical Guide on Application Security: Secure Development by IBM December 2010 - (Free Research) When security practitioners attempt to introduce secure development practices into a development process and organization they are less than accepted. Development organizations tend to reject formal internal structure and process imposed from the outside. Read on to learn how to implement secure development practices in a development organization.  (EBOOK)

Protecting Your Applications from Backdoors: How Static Binary Analysis Helps Build High-Assurance Applications by Veracode, Inc. May 2010 - (Free Research) Backdoors pose operational risk to software that is too significant for organizations to ignore. Binary-level application testing (also called compiled-code analysis) makes it possible to examine the entire application in its final “as delivered” form. Read this white paper to learn more about protecting applications from backdoor vulnerabilities.  (WHITE PAPER) READ ABSTRACT |

Securing your Private Keys as Best Practice for Code Signing Certificates by VeriSign EMEA July 2011 - (Free Research) This paper examines recent security breaches such as Stuxnet, and offers best practice measures, especially for the Windows platform, that can help to safeguard private keys so that your company doesn't become tools of malicious hackers.  (WHITE PAPER) READ ABSTRACT |

Using Cyclomatic Path Analysis to Detect Security Vulnerabilities by McCabe Software, Inc. November 2010 - (Free Research) The paper discusses how path coverage is better than branch or statement coverage in testing to uncover security vulnerabilities, including showing how several CWE vulnerabilities could be undetected by branch coverage but detected by path coverage. Download this paper and find out how Cyclomatic Path Analysis can uncover these vulnerabilities.  (WHITE PAPER) READ ABSTRACT |

Architectural Quality: Design, Development and Testing Rules by hello2morrow, Inc. September 2008 - (Free Research) Read this white paper and explore essential architectural quality rules and their individual considerations. Discover a tool that enforces the most important rules automatically during development.  (WHITE PAPER) READ ABSTRACT |

E-Guide: Writing secure SQL database code by IBM May 2011 - (Free Research) When developing and deploying a database, organizations should never rely solely on their developers to provide security. This expert e-guide offers tips for writing secure SQL database code to ensure you build appropriate security controls for the specific features and functionality you need.  (EGUIDE) READ ABSTRACT |

Avoiding the SANS Top 25 Most Dangerous Programming Errors by Veracode, Inc. February 2010 - (Free Research) The SANS/CWE list of the Top 25 Most Dangerous Programming Errors is already becoming the "standard" for developing secure applications in many large enterprises. In this webcast, review the prevalence of attacks that use vulnerabilities listed in the Top 25 and learn how to safeguard your code to avoid the most dangerous programming errors.  (WEBCAST) READ ABSTRACT |

Lumension Vulnerability Scanner Offer by Lumension March 2009 - (Free Research) This network-based scanning utility provides comprehensive visibility into the IT environment through in-depth scans and the automated discovery of all assets, both managed and unmanaged. Scan up to 25 nodes.  (ASSESSMENT TOOL) READ ABSTRACT |

ASG-Discovery and Dependency Mapping (ASG-DDM)™ by ASG Software Solutions May 2010 - (Free Research) Understanding which hardware and software components support which business systems is extremely difficult. For many years, the clipboard and spreadsheet appear to have been the tools of choice, with the result that many decisions were made based on outdated and inaccurate information. Read this paper to find out more.  (WHITE PAPER) READ ABSTRACT |

Business-Critical Benefits of Workload Automation Solutions by ASG Software Solutions February 2010 - (Free Research) Enterprises have struggled with workload automation (WLA) implementation because of its complexities, dependencies, and costs. These obstacles existed primarily because WLA was simply not a mature technology. However, today WLA solutions are widely accessible and achievable. Read this paper to learn about the latest innovations.  (WHITE PAPER) READ ABSTRACT |

Privileged User Activity Auditing: The Missing Link for Enterprise Compliance and Security by Centrify Corporation September 2011 - (Free Research) View this paper to describe how Centrify DirectAudit can solve the security, compliance and third-party access challenges organizations face when auditing and monitoring UNIX, Linux and Windows systems and discover why traditional approaches cannot address the requirements of today's changing environment.  (WHITE PAPER) READ ABSTRACT |

E-Book: Technical Guide on Web Application Firewalls by SearchSecurity.com November 2010 - (Free Research) Web application firewalls are becoming critical data protection and compliance tools that any security decision maker must understand. SearchSecurity.com presents a comprehensive guide to Web Application Firewalls in which experts examine evaluation criteria, deployment considerations and management issues.  (EBOOK)

Improving Software Security by Identifying and Securing Path Linking Attack Surfaces to Attack Targets by McCabe Software, Inc. April 2012 - (Free Research) <p>Most companies do not have time to thoroughly investigate all of the potential attack targets inside an application. This white paper explains how the use of software security analysis (SSA) and path methodologies can help you identify vulnerable code and improve application security.</p>  (WHITE PAPER) READ ABSTRACT |

We are always striving to improve our customer experience. Please notify us if there is a company missing that you feel should be in our directory.