Best Practices for Web Application Scanning on Full Production Sites | Starwood Hotels
https://www.ispeech.org/text.to.speech
Qualys Presentation at RSA Conference 2017
While Qualys Web Application Scanning (WAS) can examine full-production applications, analyzing third-party JavaScript is not always easy because of the ways users interact with it. Jim Weiler, application security architect at Starwood Hotels, will illustrate the challenges of exercising a whole production site and business logic, and offer solutions for best exercising application logic, identifying false positives, determining and testing remediation, and automating and scaling the process. This talk will also explain best practices for using WAS to find web application vulnerabilities that go undetected by static analysis in the later stages of a secure software development lifecycle, as well as for finding vulnerabilities in critical, integrated 3rd party applications.
Speakers:
Jim Weiler, Application Security Architect, Starwood Hotels
Likes: 0
Viewed:
source
Gloss