Magic Quadrant for Static Application Security Testing

You must be a logged in to view this document.

Click here if you've lost or would like to change your password?

Register on ITO America Business Technology website

Register on ITOAmerica.com and gain access to countless articles, podcasts, videos and more, contributed by some of the top minds in business technology!

Excerpt:

As attacks have become more financially motivated, and as organizations have improved the security of their network, desktop and server infrastructures, there has been a shift to application-level attacks. Static application security testing is one of the technology markets aimed at securing applications.

SAST should be considered a mandatory requirement for all IT organizations that develop or procure applications. Even though the market has not reached maturity, enterprises must adopt SAST technologies and processes because the need is strategic.

Securing Your Applications: Three Ways to Play
Aberdeen's research confirms that the total annual cost of application security initiatives is far outweighed by the benefits of fewer actual security-related incidents, fewer audit deficiencies, and faster time to remediate. But all respondents, from Best-in-Class to Laggards, experienced a positive return on their annual application security investments.

Does Application Security Pay? Measuring the Business Impact of Software Security Assurance Solutions
We are at a time when IT budgets are coming under closer scrutiny and CISO's are being called upon to justify SSA investments from a cost-benefit perspective. This study can provide the evidence needed for information security executives to communicate the business value of software security solutions in a language that matters to senior leadership.

Capturing the New Frontier: How Software Security Unlocks the Power of Cloud Computing
This paper describes the concepts of cloud computing and software security within the cloud and what they mean to organizations interested in moving to the cloud (consumers), and to the providers of cloud services.