Wednesday, 8 November 2006

Watchfire Adds Automation to AppScan 7.0

Watchfire, a provider of application vulnerability assessment software, has unveiled AppScan 7.0 to help customers reduce the amount of time it takes to certify Web application security, as per a statement issued by the company.

The automated privilege-escalation test in AppScan 7.0 can find flaws that let a machine legitimately logged in to a site trick the application into granting greater privileges. So a customer at an e-commerce site who’s logged in to buy something might be able to gain administrative rights and access account information, for example. The new test can reduce the time it takes to make such tests from two to three days if performed manually to two to three hours, the company said.

According to Watchfire, AppScan 7.0 highlights include:

• Privilege escalation testing
• Two-factor authentication support
• Validation highlighting & reasoning
• Identifying the root cause of vulnerabilities