Seeker Overview - Customer facing - 2015-10-12

《Seeker Overview - Customer facing - 2015-10-12》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、Seeker-AgileSoftwareSecurity©2015Synopsys,Inc.1•Anewgenerationofapplicationsecuritytesting•ThepioneersofInteractiveAppSecTesting(IAST)•Adynamictestingsolutionwhicheliminatesfalsepositives•Anagiletestingsolutionwhichfullyintegratesintothedevelopmentlifecycle©2015Synopsys,Inc.2Awards&Recogn

2、ition•Visionary–ApplicationSecurityTestingMagicQuadrant•Newcategory(IAST)namedtop10for2014•CoolVendor•Leader-ApplicationSecurityTestingWave•Industryinnovator•Top10•Innovationoftheyear•R&Dinnovationrecognition©2015Synopsys,Inc.3Seeker–AgileSoftwareSecurityACCURACYCLARITYSIMPLICITYIdentifie

3、svulnerabilitiesEverythingrequiredFullyintegratesintothatposearealthreattoeffectivelysecureexistingapplicationtocriticaldatayourapplicationsdevelopmentlifecycle©2015Synopsys,Inc.4Seeker–AgileSoftwareSecurityAttheCoreofSeeker:Auniquetechnologythatanalyzesandcorrelatesend-to-endflowofdataan

4、drun-timecodeexecutionwithsimulatedattacksACCURACY•Analyzescodeasitruns,linebylineIdentifiesvulnerabilities•Tracksdatathroughouttheapplicationthatposearealthreat•Mapsbusinessprocessesintheapplicationtocriticaldata•Simulatesattacks(exploits)AssessesimpactandclassifiesriskEliminatesfalsepos

5、itivestodeliverofeveryvulnerabilityonlyrelevantresults©2015Synopsys,Inc.5Seeker–AgileSoftwareSecurityWhatYouSeeisWhatYouNeedtoFixCLARITYFalsePositivesEliminated!AssessmentofApplicationSecurityState•Aclearoverviewofapplicationrisk•Riskleveldemonstratedthroughsimulatedattacksandimpactanalys

6、isVisualized,ConciseExplanationsEverythingrequired•Screenshots&videosshowvulnerabilityexploitationprocessanditsimpacttoeffectivelysecure•FocusedtechnicalexplanationsshowhoweachvulnerabilitybehavesyourapplicationsRelevantInstructionsforEffectiveRemediation•Locationofsourcecodewherethevulne

7、rabilityislocated•Specificremediationinstructionsfortestedapplication©2015Synopsys,Inc.6Seeker–AgileSoftwareSecurityContinuousDeliveryofSecureCode•IntegratewithExistingTestingAutomationSIMPLICITY•ContinuouslyTestforVulnerabilities•FeedInformationtoRelevantDevforFixi