1LABS GALLERY: IBM ISS Web App Solution Paints Big Security Picture
by Matthew D. Sarrel
2Proventia Test Rack Front
Here is our IBM ISS Proventia IPS test rack. The top device is an appliance running Proventia SiteProtector. The next down is the GX5108IPS we tested. Below that is a Proventia External Bypass Unit, and there are two Proventia Network Mail Security System boxes on the bottom.
3IBM ISS Test Rack Back
The Proventia GX5108 IPS we tested is the device on the bottom. There are redundant power supplies and fans in the 2U chassis.
4AppScan Add SiteProtector
After following the simple setup process, all Rational AppScan results can be published to SiteProtector, where they can be integrated with security assessments.
5Siteprotector AppScan Security Detail
After publishing AppScan results to SiteProtector, security personnel can integrate vulnerability assessment information into overall security monitoring and reporting.
6AppScan After Scan
After scanning my application, AppScan provided me with a comprehensive list of vulnerabilities and variations of those vulnerabilities. I could drill down on a vulnerability or a page and see more information in the pane below.
7Cross-Site Scripting Advisories
Links to advisories are included in the information about the cross-site scripting vulnerabilities found in my application.
8Cross-Site Scripting General Remediation
Remediation tasks start general and then dive down to specific lines of code. This helps developers and security personnel learn the principles as well as the fixes.
9Cross-Site Scripting Training
After a scan, links are provided to multimedia training materials that walk you through an attack and provide context with the significance of the attack and how it can be used.
10AppScan Reports Customizable
Reports in AppScan are highly customizable. Aside from the easy option of selecting report content based on role (Executive, Developer), it is also possible to pick specific content from the tree on the right.
11AppScan Report Word Template
This is the coolest feature Ive seen in a reporting engine. It is very easy to create a completely custom report template in MS Word and then publish reports exactly how management wants to see them.
12Create Report Regulations
AppScan can place vulnerability assessment in context by mapping each discovered vulnerability onto a specific component of most applicable regulations. Demonstrating compliance is much easier when reporting can be automated like this.
SecurityFusion correlates vulnerabilities discovered in AppScan with attack traffic reported by the Proventia IPS. This way remediation activities can be prioritized based on the likelihood of a vulnerability being exploited.