Gartner Blog Network

Tag: 'application-security-testing-tools' Blog Posts

from the Gartner Blog Network

Getting Ready for Gartner’s 2012 Infrastructure & Operations and Information Security Summits

by Neil Macdonald  |  May 21, 2012

I’ve been absent from my typical blogging routine getting my material finalized for two Gartner upcoming US-based summits in June 2012. The first is Gartner’s Infrastructure and Operations Management Summit...

Read more »

Interactive Application Security Testing

by Neil Macdonald  |  January 30, 2012

Dynamic Application Security Testing (DAST) solutions test applications from the “outside in” to detect security vulnerabilities. In contrast, Static Application Security Testing (SAST) solutions test applications from the “inside out”...

Read more »

DevOps Needs to Become DevOpsSec

by Neil Macdonald  |  January 17, 2012

DevOps seeks to bridge the development and operations divide through the establishment of a culture of trust and shared interest among individuals in these previously siloed organizations. However, this vision...

Read more »

Link Web Application Firewalls to Dynamic Application SecurityTesting Tools

by Neil Macdonald  |  January 9, 2012

I called this a “security no brainer” years ago and the advice is absolutely still relevant today. In Gartner’s latest Magic Quadrant for Dynamic Application Security Testing (DAST) solutions for...

Read more »

The Market for Dynamic Application Security Testing is Anything but Static

by Neil Macdonald  |  January 4, 2012

We’ve just published a new Magic Quadrant for Dynamic Application Security Testing (DAST) for Gartner clients. In Gartner research, we use the term DAST to refer to testing solutions and...

Read more »

Security Observations from European Symposium

by Neil Macdonald  |  November 14, 2011

I spent the last week in Barcelona with 4,000+ attendees at the 2011 Gartner European Symposium. It was a new venue for Gartner (we were displaced from Cannes by the...

Read more »

Four Security Breaches, Four Security Lessons

by Neil Macdonald  |  May 23, 2011

There’s been a bunch of highly publicized attacks recently. Each one has a major lesson for information security. 1) Barracuda’s breach Major lesson: Test all of your web-enabled applications for...

Read more »

Lesson from Android: Does More Open Have to Mean Less Secure?

by Neil Macdonald  |  March 11, 2011

Google’s Android has made the news a couple of times already in 2011: Here, with a credit card snooping exploit proof of concept and most recently, with malware that had...

Read more »

Is Microsoft’s Secure Development Lifecycle Losing Its Effectiveness?

by Neil Macdonald  |  March 7, 2011

I was performing some background research on the number and severity of vulnerabilities produced by Apple, Microsoft and other vendors when I ran across something quite interesting. (BTW - I...

Read more »

Static or Dynamic Application Security Testing? Both!

by Neil Macdonald  |  January 19, 2011

Static application security testing (SAST) can be thought of as testing the application from the inside out – by examining its source code, byte code or application binaries for conditions...

Read more »