ODE Brochure

Application Security

Why Application Security Matters ?

Compliance to Standards
and Web Application
Over the past five years, applications—particularly web
Security Best Practices applications—have been increasingly leveraged as a top
vector of attack putting significant financial impact to the
. OWASP TOP 10 enterprise and privacy of the end users.
. PCI DSS
. GLBA Gartner's recent studies show that hackers are moving towards
. SOX web application based attacks, 75% of total attacks now occur
on Web applications. According to the 2012 Verizon Data Breach
. FISMA Investigations Report, more than half of successful hacking
. AMEX attacks against large companies were through web applications.
. NERC / SCADA
Businesses today need to have at hand risk-based analysis and
. NIST remediation across application development supply chain.
Service Avantages
.Static Application Security The application security program's value proposition must take
Testing
into account and support Organization’s business strategy.
.Dynamic Application Security
Testing
Implementing security policies and controls without appropriate
. Secure Coding Best Practices alignment to business strategy and objectives runs the risk of
. Application Security Verification the business not buying into the initiative.
Process, Standards, and Guidelines
An Application Security Program requires a business aligned
policy that defines clear submission, acceptance, and release
requirements for applications.

ODE
www.icodesecurity.com Tel +216-26-881-011 Fax +216-71-965-100 iCode information security sarl, Rue du Lac Constance Im. Regus
sales@icodesecurity.com © 2010-2013 iCode information security sarl Carthage Center - Les Berges du Lac, 1053 Tunis – Tunisie
 ODE Brochure

Application Security

How We Address The Problem ?

Compliance to Standards iCode helps organizations develop Business-Centric Application
and Web Application Security Program, define policies and standard risk rating
Security Best Practices systems for their applications to ensures a mapping of
. OWASP TOP 10 application security requirements into their business context.
. PCI DSS
iCode Application Security Program Consulting Services
. GLBA include the following :
. SOX - Modeling Application Theats
. FISMA - Developing Security Standards, Levels & Best Practices
- Defining Security Baselines and Policies
. AMEX
- Definition of Security Testing Process, Tools and Lifecycle
. NERC / SCADA - Deliver Secure Coding and Testing Training & Awareness Sessions
. NIST - Define Remediation Strategies
Service Avantages
.Static Application Security
Testing

.Dynamic Application Security

Testing

. Secure Coding Best Practices

. Application Security Verification
Process, Standards, and Guidelines

iCode offers next generation Static and Dynamic Application

Security Testing Technology from leading providers and helps
organizations easily establish Application Security Assurance
Process to improve their Security Posture and facilitate
Compliance.

By using Application Security Testing Tools organizations have

some confidence in the correct use of security controls and that
ODE theses controls are working correctly inside their applications.

www.icodesecurity.com Tel +216-26-881-011 Fax +216-71-965-100 iCode information security sarl, Rue du Lac Constance Im. Regus
sales@icodesecurity.com © 2010-2013 iCode information security sarl Carthage Center - Les Berges du Lac, 1053 Tunis – Tunisie