Monday, 22 March 2010

Q1 release from Fortify SRG

« BSIMM2 | Main | Schneier on Software Security Assurance »

If you're a Fortify customer you already know we released updates in three main areas at the end of February (we always release the last business day of the second month of the quarter). If you haven't seen these updates, I decided to post a summary of what we've been up to here. As of this release, the Fortify Secure Coding Rulepacks detect 439 unique categories of vulnerabilities across 18 languages and over 650,000 individual APIs. In brief, our latest releases include:

Fortify Secure Coding Rulepacks
  • Oracle Application Framework – Support for Oracle Application Framework (OA Framework), the Oracle Applications development and deployment platform for HTML-based business applications.
  • CakePHP – Support for the CakePHP rapid development framework, which includes the model-view-controller framework and simplifies database interaction.
  • SANS/CWE, OWASP, FISMA Standards Support – Vulnerabilities generated by this rulepack now include a reference to like issues found in the 2009 SANS/CWE Top 25, OWASP 2010 Top 10, and FISMA (specifically FIPS-200).
  • 4 New Categories – New categories include Race Condition: Format Flaw, Process Control: Invoker Servlet, and CakePHP Misconfiguration vulnerabilities.
  • 50+ Enhancements – Over 50 internally and externally requested minor enhancements.

    Fortify RTA Rulepack Kit
  • Spring Security 2 – Provides support for identifying brute force logins and report Spring Security authorization failures and privilege changes at runtime.

    Premium Content
  • Microsoft SDL – Process templates for Fortify 360 Governance users implementing the four security maturity models in the Microsoft Security Development Lifecycle (MS SDL): Basic, Standardized, Advanced, and Dynamic.
  • CVSS – Project templates for auditors using Fortify SCA and Audit Workbench to annotate vulnerabilities using the Common Vulnerability Scoring System (CVSS).
    • Posted by jwest at 12:18 PM in Fortify
    Responses (0)

     

    [Trackback URL for this entry]

    Your comment:

     
    Generate another code
    SCode

    Please enter the code as seen in the image above to post your comment.
     
     

    Live Comment Preview: