Application Security
The thousands of web applications across the Internet have made it possible to do away with millions of transactions that typically would have mandated one’s physical presence
These applications are easily available for use as they are deployed over the Internet and can be accessed from almost anywhere in the world. This means that these very applications are also available to the bad guys to attack. These bad guys make use of the web applications and exploit their vulnerabilities to breach the security of the system. A successful attack could mean the compromise of any of the three vital pillars of security – Confidentiality, Integrity and Availability. There are various threats that plague web applications today. Software Genius Inc’s Security Assurance Consulting provides the requisite expertise and competency in foreseeing and addressing application security concerns.
Offerings
A dedicated team called the Application Security Assurance Team or ASAT work toward rendering this service.
Consulting Services
- Application Threat Modelling
- Vulnerability Assessment and Penetration Testing
- Application Security Risk Mitigation and Assurance
Education Services
- Web Application Security – Attack and Defense
- Secure Software Essentials (ASP.NET / J2EE)
Benefits
- Identify and prioritise threats, likelihood of occurrence and consequences
- Identify vulnerabilities across a system or in a particular component
- Define undesirable consequences and determine paths to achieve those effects
- Rank and order various tasks, vulnerabilities, mitigations based upon multiple measures important to a decision maker
- Measure compliance of a system with respect to security requirements, both explicit and implicit
- Improve the design and implementation of a system throughout its lifecycle, though objective assessment
- Provide actionable and quantifiable information to team members, project leads and program managers
- Rapid assessment of scenarios from a technical and adversarial perspective