IBM Security AppScan是一个领先的 Web 应用安全测试工具,曾以 Watchfire AppScan 的名称享誉业界。IBM Security AppScan 可自动化 Web 应用的安全漏洞评估工作,能扫描和检测所有常见的 Web 应用安全漏洞,例如 SQL 注入(SQL-injection)、跨站点脚本攻击(cross-site scripting)、缓冲区溢出(buffer overflow)及最新的 Flash/Flex 应用及 Web 2.0 应用曝露等方面安全漏洞的扫描。
8.7版本更新内容如下:
IBM Security AppScan Source
Federal Information Processing Standards (FIPS) 140-2 support
Internet Protocol version 6 support
IBM Security AppScan Source ported to Mac OS X
iOS security research capability
Objective-C, enhanced JavaScript™ , and Java™ analysis capability on Mac OS X support
Xcode interoperability
Installation improvements
Enhanced filter options
IBM Security AppScan Enterprise
FIPS 140-2 support
Enterprise database encryption enhancements
Dynamic Analysis Scanner scalability enhancements
Web Service Generic Services components improvements
Activity log enhancements
Installation workflow enhancements
IBM Security AppScan Standard
FIPS 140-2 support
Web Service Generic Services components improvements