Comments
yourfanat wrote: I am using another tool for Oracle developers - dbForge Studio for Oracle. This IDE has lots of usefull features, among them: oracle designer, code competion and formatter, query builder, debugger, profiler, erxport/import, reports and many others. The latest version supports Oracle 12C. More information here.
Cloud Expo on Google News
SYS-CON.TV
Cloud Expo & Virtualization 2009 East
PLATINUM SPONSORS:
IBM
Smarter Business Solutions Through Dynamic Infrastructure
IBM
Smarter Insights: How the CIO Becomes a Hero Again
Microsoft
Windows Azure
GOLD SPONSORS:
Appsense
Why VDI?
CA
Maximizing the Business Value of Virtualization in Enterprise and Cloud Computing Environments
ExactTarget
Messaging in the Cloud - Email, SMS and Voice
Freedom OSS
Stairway to the Cloud
Sun
Sun's Incubation Platform: Helping Startups Serve the Enterprise
POWER PANELS:
Cloud Computing & Enterprise IT: Cost & Operational Benefits
How and Why is a Flexible IT Infrastructure the Key To the Future?
Click For 2008 West
Event Webcasts
McAfee's Foundstone Professional Services to Launch Free Web Service Tools
Teaching Developers How to Create More Secure Software

McAfee announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.

"In the evolving security risk landscape, hackers and malicious insiders are an undeniable threat to organizations," said Kevin Weiss, president, McAfee, Inc. "As a division of McAfee, Foundstone Professional Services is an integral part of the company's commitment to moving the security industry forward by providing instructional courses and unique tools that enable consultants to better understand the mindset of malicious hackers."

Vulnerabilities such as cross-site scripting and hidden field manipulation are frequent within Web applications, resulting in a surprising number of corporate and commercials sites being exposed to hackers and often suffering from information highway robbery. Foundstone tools replicate interconnected real-world application scenarios including travel, banking and shipping, each written in a different programming language, to demonstrate the potential cross-platform risks to a business' own applications, and those they are connected to.

"In the race to take storefronts online, most Web applications were developed with a focus on functionality, not security. As a result, organizations may be experiencing theft of goods, services or data without even realizing it," said Mark Curphey, vice president, Foundstone Professional Services, a division of McAfee, Inc. "These tools provide developers with a unique opportunity to practice hands-on hacks and expose vulnerabilities safely within real-world scenarios to gain a better understanding of the potential issues. Forewarned is forearmed, and developers can incorporate this knowledge into the building or fixing of more robust and secure applications."

According to Gartner, through 2008, application security will become an important evaluation criterion, weighted as high as system functionality. Organizations that integrate security into their software development life cycles will experience an 80 percent decrease in critical vulnerabilities found in their publicly released software or externally facing Web applications.

The following educational tools will be released over the coming month, each accompanied by a learning whitepaper:

* Hacme Bank: Simulates a real world Web services enabled online banking application, built with known and common vulnerabilities.
* Hacme Shipping: Web based shipping application written in ColdFusion MX7, using the Model-Glue framework and MySQL database.
* Hacme Travel: Simulates a travel reservation system, allowing users to attempt common exploits against a client-server type of application written in C++.
* Hacme Books: Built on the popular Java 2 Enterprise Edition (J2EE) technology, it includes security vulnerabilities in both the application design and implementation.
* Hacme Flowers: Replication of an online flower store, written in PHP.

Foundstone is also releasing a number of resource tools, aimed at providing more efficient and relevant practices for application developers and consultants:

* HacPac: Aggregates security testing tools and information, software updates and news. A "one-stop shop" brought right to the desktop for security consultants.
* CodeScope: Is designed to help application developers and code reviewers determine the complexity and scope of a code base and validate adherence to best coding practice.
* SiteScout: Produces site map and site statistics based on user navigation, automating the process of how information flows through the application and provides threat modeling.
* CredDigger: An assessment tool that notes user credentials and tries to determine each and every host and Microsoft domain for which they are valid.


About SOA News Desk
SOA World Magazine News Desk trawls the world of distributed computing and SOA-related developments for the latest word on technologies, standards, products, and services and brings key information to you in a timely and convenient summary form.

In order to post a comment you need to be registered and logged in.

Register | Sign-in

Reader Feedback: Page 1 of 1

McAfee the leading dedicated security company, announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.


Your Feedback
SYS-CON Australia News Desk wrote: McAfee the leading dedicated security company, announced that Foundstone Professional Services will launch a series of free tools that teach developers, programmers, architects and security professionals how to create more secure software. The tools will also review the root causes of increasingly prolific crimes such as e-shoplifting, session hi-jacking and identity theft.
Latest Cloud Developer Stories
Digital transformation is about embracing digital technologies into a company's culture to better connect with its customers, automate processes, create better tools, enter new markets, etc. Such a transformation requires continuous orchestration across teams and an environment b...
With tough new regulations coming to Europe on data privacy in May 2018, Calligo will explain why in reality the effect is global and transforms how you consider critical data. EU GDPR fundamentally rewrites the rules for cloud, Big Data and IoT. In his session at 21st Cloud Expo...
To get the most out of their data, successful companies are not focusing on queries and data lakes, they are actively integrating analytics into their operations with a data-first application development approach. Real-time adjustments to improve revenues, reduce costs, or mitiga...
In his general session at 21st Cloud Expo, Greg Dumas, Calligo’s Vice President and G.M. of US operations, discussed the new Global Data Protection Regulation and how Calligo can help business stay compliant in digitally globalized world. Greg Dumas is Calligo's Vice President a...
Mobile device usage has increased exponentially during the past several years, as consumers rely on handhelds for everything from news and weather to banking and purchases. What can we expect in the next few years? The way in which we interact with our devices will fundamentally ...
Subscribe to the World's Most Powerful Newsletters
Subscribe to Our Rss Feeds & Get Your SYS-CON News Live!
Click to Add our RSS Feeds to the Service of Your Choice:
Google Reader or Homepage Add to My Yahoo! Subscribe with Bloglines Subscribe in NewsGator Online
myFeedster Add to My AOL Subscribe in Rojo Add 'Hugg' to Newsburst from CNET News.com Kinja Digest View Additional SYS-CON Feeds
Publish Your Article! Please send it to editorial(at)sys-con.com!

Advertise on this site! Contact advertising(at)sys-con.com! 201 802-3021



SYS-CON Featured Whitepapers
ADS BY GOOGLE