IBM Application Security Insider

Crawling “classical” web applications is a problem that has been addressed more than a decode ago. Efficient crawling of web applications that use advanced technologies such as AJAX (called R...

https://blog.watchfire.com/wfblog/2013/06/building-rich-internet-applications-models-example-of-a-better-strategy.html

In March 2013, we released version 8.7 of AppScan. One of the focus areas for that release was to improve the scalability and performance of the enterprise components of the solution, specificall...

https://blog.watchfire.com/wfblog/2013/05/appscan-enterprise-v87-performance-improvements.html

In this hands-on article, learn how to use IBM Security AppScan Standard with mobile user agents, as well as emulators and actual devices for Android and iOS.

https://blog.watchfire.com/wfblog/2013/04/practical-mobile-app-security-scanning-tips.html

2012 IBM CAS Project of the Year: Efficient and Scalable Mapping of Mobile and Complex Rich Internet Applications for Automated Security Testing The ability to “crawl” Web sites and Web appli...

https://blog.watchfire.com/wfblog/2013/01/research-awards-for-project-on-crawling-mobile-and-rich-internet-applications.html

Mobile security can be tested in a variety of ways. You can apply black box testing to test the server side logic that your mobile app is working with, as we've recently blogged about. You can al...

https://blog.watchfire.com/wfblog/2012/12/scan-android-apps.html

IBM Security Appscan provides automated security scanning of web applications. Did you know that you can apply test policies within IBM Security AppScan to cover particular aspects of the scan? U...

https://blog.watchfire.com/wfblog/2012/12/understanding-appscan-test-policies.html

Mobile sites - Resurrecting security risks In today's world any self respecting web site must provide access to its services through a desktop browser as well as a mobile device. This basically m...

https://blog.watchfire.com/wfblog/2012/11/have-you-scanned-your-mobile-site-for-vulnerabilities-yet.html

Like the web itself, security scanners are advancing at a fast pace. Here are the top 5 technologies that leading security professionals are applying to stay ahead of the curve: 5. XSS Analyzer T...

https://blog.watchfire.com/wfblog/2012/11/top-5-innovations-transforming-security-scanners.html

Let's see how String Analysis is used to improve the accuracy of JSA. Consider the following real-world example: var str = document.URL; var url_check = str.indexOf('login.html'); if (url_check >...

https://blog.watchfire.com/wfblog/2012/11/string-analysis-in-appscanjsa.html

The best technologies are often the ones that you, as a user, never have to worry about. They work automatically, behind the scenes, making a product or service work better. With nothing to confi...

https://blog.watchfire.com/wfblog/2012/11/what-is-string-analysis.html