Software Security Tools Information

Software security tools help find vulnerabilities before hackers do.

Software security tools automate software vulnerability testing, allowing developers and information security experts to focus on plugging holes instead of trying to find them. These tools speeds up software security testing and eliminate the uncertainty of manual testing.

Code Coverage Tools

Code coverage tools scan the initial software code for potential vulnerabilities. This is also called software code analysis. The tools identify potential security gaps, allowing them to be fixed before release for software security testing.

Port Scanning Tools

Ports are connection points between a device and a network or between networks. Port scanning tools look for open ports that are vulnerable to attack. These ports can be closed or have security protocols applied.

Application Security Testing Tools

Application security testing software runs a series of attacks that mimic a hacker's actions. This form of software security tool uses attack forms programmed into the software. It cannot change tactics or create tailored attacks as a hacker could. Application security testing can include Web-based applications on websites, operating systems, server software and software applications.

References

• "Hacking Exposed 6"; Stuart McClure, Joel Scambray, George Kurtz; 2009
• "Architecting Secure Software Systems"; Asoke Talukder, Manish Chaitanya; 2008
• "Hack Proofing XML"; Larry Loeb; 2002
• "Software Security: Building Security In"; Gary McGraw; 2006

Resources

• "24 Deadly Sins of Software Security"; Michael Howard, David LeBlanc, John Viega; 2009
• "Web Security Testing Cookbook"; Paco Hope, Ben Walther; 2008