Johannesburg, 04 Nov 2014
Parasoft's unique automated infrastructure unobtrusively drives the development process to ensure that secure software is delivered on time and on budget.
Blue Turtle, the Parasoft reseller in southern Africa, adds Parasoft's unique Application Security Compliance solution to its arsenal. Parasoft, a leading provider of solutions and services that deliver quality as a continuous process, announced the availability of enhanced data flow analysis capabilities that help organisations rapidly identify high-risk runtime security vulnerabilities as well as monitor security policy compliance.
With its newly integrated features, Parasoft's Application Security Compliance now offers the following additional capabilities:
Security as a continuous process
Parasoft's Application Security Solution establishes a continuous process that ensures security verification and remediation tasks are deployed across every stage of the SDLC and ingrained into the team's workflow.
Establish, apply, and monitor adherence to policies
Parasoft's policy-driven approach defines the organisation's expectations around quality while ensuring consistent, unobtrusive policy application. The automated infrastructure automatically monitors policy compliance for visibility and auditability.
Out-of-the-box support for critical security standards and initiatives
Achieve compliance with industry best-practices, standards and guidelines, including PCI DSS, OWASP, CWE/SANS, NIST SAMATE, and more
Easily configure custom rules for enforcing coding best practices
The extensive, continually-expanding knowledge base of rules can be easily customised (graphically, without coding) to enable automated monitoring of custom best practices. The result is more realistic and accurate validation that is aligned with the team's security priorities.
Robust security validation and verification practices
Parasoft automates a broad spectrum of application security activities for C/C++, Java, .NET, SOA, Web and RIA - the most comprehensive in the industry, including:
* Static code analysis - Coding standards, data flow, metrics - including preconfigured PCI DSS 6 and OWASP configurations.
* Peer review - Workflow management and automation.
* Penetration testing - Message layer and web interface.
* Message Layer Policy Validation - Authentication, encryption and access control.
* Runtime analysis - Buffer overflows and other memory errors.
* Unit testing - Verification of input validation methods.
Facilitates remediation - not just detection
To promote rapid remediation, each vulnerability detected is prioritised, automatically correlated to the developer who introduced it, then distributed to his or her IDE with direct links to the problematic code. Eventually, developers start writing more secure code as a matter of habit.
Extensive centralised reports
Parasoft's centralised reporting system provides real-time visibility into overall security status and processes, documents improvements, and helps you determine what additional actions are needed to safeguard security.
For a consultation and additional information, please contact Blue Turtle at info@blueturtle.co.za or 011 206 5600.
Share