Get Smart about Business Spending
IBM software scans for security holes in Flash, Ajax
IBM announced new software on Wednesday that scans Flash and Ajax-based apps for security problems.
IBM Rational AppScan can automatically scan online applications every 15 minutes to check for security defects that could lead to compromised computers and Internet attacks. Administrators can receive security alerts on their mobile devices as they occur.
The standard version of the product costs $17,550 for a one-year license. The software also supports service oriented architecture applications, IBM said.
More than half of all vulnerabilities disclosed last year were Web applications, according to IBM's X-Force Trend Report.
And Flash seems to get its share of vulnerabilities. The number of Flash vulnerabilities detected in Web applications over the last two years have increased by 300 percent compared with 2005 and 2006, according to the IBM X-Force report.
Adobe Flash Player is on more than 98 percent of Internet connected computers and is used to view 80 percent of the video on the Web, IBM said.
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor. 
If they're scanning for application errors, it's a one time use. If it's a scan for Flash vulnerabilities, why not report to Flash to fix the bug?
Looks like IBM is modelling it's business to make money out of other company product bugs they found.
IBM's first client will likely be Adobe I guess. Too pricey for flash web devleopers. It'll be nice to have a online reseller for this tool who will allow individuals to to check their Flash applications for a small fee.
The service identifies security vulnerabilities and produces recommended solutions that can fix, or provide a viable workaround to the identified vulnerabilities www.gamasec.com
For a cost of only $600 for one year suscription and reception of monthly reports
So why to pay $17500 + internal recourse if you can have the same services for a lower price?
- by May 21, 2009 5:12 AM PDT
- Another good web security scanning service is Powerfuzzer http://scanner.powerfuzzer.com. Their software was featured in books and numerous websites. Sample report is available on the website, so you can see what it is capable of. They currently have a free scan offer for educational facilities and non-profits.
- Like this Reply to this comment
-
(7 Comments)