Comments
yourfanat wrote: I am using another tool for Oracle developers - dbForge Studio for Oracle. This IDE has lots of usefull features, among them: oracle designer, code competion and formatter, query builder, debugger, profiler, erxport/import, reports and many others. The latest version supports Oracle 12C. More information here.
Cloud Expo on Google News
SYS-CON.TV
Cloud Expo & Virtualization 2009 East
PLATINUM SPONSORS:
IBM
Smarter Business Solutions Through Dynamic Infrastructure
IBM
Smarter Insights: How the CIO Becomes a Hero Again
Microsoft
Windows Azure
GOLD SPONSORS:
Appsense
Why VDI?
CA
Maximizing the Business Value of Virtualization in Enterprise and Cloud Computing Environments
ExactTarget
Messaging in the Cloud - Email, SMS and Voice
Freedom OSS
Stairway to the Cloud
Sun
Sun's Incubation Platform: Helping Startups Serve the Enterprise
POWER PANELS:
Cloud Computing & Enterprise IT: Cost & Operational Benefits
How and Why is a Flexible IT Infrastructure the Key To the Future?
Click For 2008 West
Event Webcasts
McAfee's Foundstone Professional Services to Launch Free Web Service Tools
Teaching Developers How to Create More Secure Software

McAfee announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.

"In the evolving security risk landscape, hackers and malicious insiders are an undeniable threat to organizations," said Kevin Weiss, president, McAfee, Inc. "As a division of McAfee, Foundstone Professional Services is an integral part of the company's commitment to moving the security industry forward by providing instructional courses and unique tools that enable consultants to better understand the mindset of malicious hackers."

Vulnerabilities such as cross-site scripting and hidden field manipulation are frequent within Web applications, resulting in a surprising number of corporate and commercials sites being exposed to hackers and often suffering from information highway robbery. Foundstone tools replicate interconnected real-world application scenarios including travel, banking and shipping, each written in a different programming language, to demonstrate the potential cross-platform risks to a business' own applications, and those they are connected to.

"In the race to take storefronts online, most Web applications were developed with a focus on functionality, not security. As a result, organizations may be experiencing theft of goods, services or data without even realizing it," said Mark Curphey, vice president, Foundstone Professional Services, a division of McAfee, Inc. "These tools provide developers with a unique opportunity to practice hands-on hacks and expose vulnerabilities safely within real-world scenarios to gain a better understanding of the potential issues. Forewarned is forearmed, and developers can incorporate this knowledge into the building or fixing of more robust and secure applications."

According to Gartner, through 2008, application security will become an important evaluation criterion, weighted as high as system functionality. Organizations that integrate security into their software development life cycles will experience an 80 percent decrease in critical vulnerabilities found in their publicly released software or externally facing Web applications.

The following educational tools will be released over the coming month, each accompanied by a learning whitepaper:

* Hacme Bank: Simulates a real world Web services enabled online banking application, built with known and common vulnerabilities.
* Hacme Shipping: Web based shipping application written in ColdFusion MX7, using the Model-Glue framework and MySQL database.
* Hacme Travel: Simulates a travel reservation system, allowing users to attempt common exploits against a client-server type of application written in C++.
* Hacme Books: Built on the popular Java 2 Enterprise Edition (J2EE) technology, it includes security vulnerabilities in both the application design and implementation.
* Hacme Flowers: Replication of an online flower store, written in PHP.

Foundstone is also releasing a number of resource tools, aimed at providing more efficient and relevant practices for application developers and consultants:

* HacPac: Aggregates security testing tools and information, software updates and news. A "one-stop shop" brought right to the desktop for security consultants.
* CodeScope: Is designed to help application developers and code reviewers determine the complexity and scope of a code base and validate adherence to best coding practice.
* SiteScout: Produces site map and site statistics based on user navigation, automating the process of how information flows through the application and provides threat modeling.
* CredDigger: An assessment tool that notes user credentials and tries to determine each and every host and Microsoft domain for which they are valid.


About SOA News Desk
SOA World Magazine News Desk trawls the world of distributed computing and SOA-related developments for the latest word on technologies, standards, products, and services and brings key information to you in a timely and convenient summary form.

In order to post a comment you need to be registered and logged in.

Register | Sign-in

Reader Feedback: Page 1 of 1

McAfee the leading dedicated security company, announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.


Your Feedback
SYS-CON Australia News Desk wrote: McAfee the leading dedicated security company, announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.
Latest Cloud Developer Stories
Cloud-based disaster recovery is critical to any production environment and is a high priority for many enterprise organizations today. Nearly 40% of organizations have had to execute their BCDR plan due to a service disruption in the past two years. Zerto on IBM Cloud offer VMwa...
Elon Musk is among the notable industry figures who worries about the power of AI to destroy rather than help society. Mark Zuckerberg, on the other hand, embraces all that is going on. AI is most powerful when deployed across the vast networks being built for Internets of Things...
Many organizations adopt DevOps to reduce cycle times and deliver software faster; some take on DevOps to drive higher quality and better end-user experience; others look to DevOps for a clearer line-of-sight to customers to drive better business impacts. In truth, these three fo...
SYS-CON Events announced today that Daiya Industry will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Daiya In...
SYS-CON Events announced today that SIGMA Corporation will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. uLase...
Subscribe to the World's Most Powerful Newsletters
Subscribe to Our Rss Feeds & Get Your SYS-CON News Live!
Click to Add our RSS Feeds to the Service of Your Choice:
Google Reader or Homepage Add to My Yahoo! Subscribe with Bloglines Subscribe in NewsGator Online
myFeedster Add to My AOL Subscribe in Rojo Add 'Hugg' to Newsburst from CNET News.com Kinja Digest View Additional SYS-CON Feeds
Publish Your Article! Please send it to editorial(at)sys-con.com!

Advertise on this site! Contact advertising(at)sys-con.com! 201 802-3021



SYS-CON Featured Whitepapers
ADS BY GOOGLE