アプリケーション・セキュリティー・テストおよびリスク管理
AppScan Enterprise を使用すると、組織は、ガバナンス、コラボレーション、およびセキュリティーの情報を提供するソリューションを使用して、アプリケーション・セキュリティーとリスク管理を促進できます。
Rational AppScan Enterprise は、アプリケーションのライフサイクル全体にわたって、高機能のアプリケーション・セキュリティー・テストをガバナンス、コラボレーション、およびセキュリティーの情報と結合します。これにより、企業は、アプリケーションのリスクを削減し、アプリケーションのプロジェクト・コストを制御し、法的規制の要求に準拠できます
- 企業全体にわたるアプリケーション・セキュリティー・プログラムを中央で制御することで、既存の開発プロセスでセキュリティーのベスト・プラクティスを推進
- アプリケーション・セキュリティーと法的規制への準拠リスクについて、企業レベルでの可視性を提供
- ソフトウェア開発ライフサイクル全体にわたってセキュリティー・テストを統合することで、リスクと修復コストの両方を削減
- 開発、テスト、およびセキュリティーの各チーム間のコラボレーションを促進
製品について
ご購入 Rational AppScan Enterprise Edition
初年度の IBM ソフトウェア・サブスクリプション & サポートは製品価格に含まれています。
ご購入には諸手続きが必要になりますので、弊社窓口までお問い合わせください。
Features and benefits
For years organizations have depended on Web-based software to run their business processes, conduct transactions and deliver increasingly sophisticated services to customers. Unfortunately, in the race to meet deadlines and stay ahead of the competition, many businesses fail to perform adequate security testing or take the time to make sure applications are in compliance with industry and regulatory standards. The result is that many companies may unknowingly expose corporate or personal data to cybercriminals who can exploit these vulnerabilities for fun and profit—placing the entire business at risk. And since many regulatory requirements mandate a degree of application security, these organizations also run the risk of failing to meet compliance audit requirements, which can result in fines and loss of customers. AppScan Enterprise enables organizations to take a strategic approach for addressing Web application security.
Key features:
Scalable, enterprise architecture that enables scanning of multiple applications simultaneously
Correlation of results discovered using dynamic and static analysis techniques
Ability to scans Web sites for both embedded malware and links to malicious or undesirable sites to ensure your Web site is not infecting visitors or directing them to unwanted or dangerous sites without their knowledge
Ability to test Web services
Advisories, fix recommendations and built-in training videos to facilitate the process of remediation once security vulnerabilities have been identified and validated
Issue management capabilities and integration with Defect Tracking Systems
Enterprise level reporting which provides visibility of the security and compliance risk the identified security issues present
Performance metrics and trending that give Management a sense of the progress being made
Flexible detailed security issues reports that enable users to group and organize their report data in multiple ways
Over 40 out-of-the box security compliance reports including PCI Data Security Standard, Payment Application Data Security (PA-DSS) (new), ISO 27001 and ISO 27002 , HIPAA, GLBA and Basel II
Role-based reporting access and scan permissions to help enforce test polices and provide governance
| Operating System | Software | Hardware |
|---|---|---|
Note: 1. For best results, install all critical Microsoft updates. 2. If the website being scanned uses technologies such as Flash, Windows Media, and additional character sets, these technologies must also be installed on the agent server machines. Supported Integrations
|
Database
Web Server
Other prerequisites
Supported Browsers
|
Processor
Memory
Hard disk
|
-
アプリケーション・セキュリティー
- Lotus Protector for Mail Security
- Rational AppScan Build Edition
- Rational AppScan Developer Edition
- Rational AppScan Enterprise Edition
- Rational AppScan Express Edition
- Rational AppScan OnDemand
- Rational AppScan Reporting Console
- Rational AppScan Standard Edition
- Rational AppScan Tester Edition
- Rational AppScan Source Edition
- Rational Virtual Forge CodeProfiler for AppScan Source Edition
- Tivoli Data and Application Security
- Tivoli Identity and Access Manager