IBM Security Tools for Application Vulnerability Testing Meet DoD Compliance Requirements

Automated attacks on DoD information systems, especially attacks against Internet-connected systems, continue to grow at such an exponential rate that they are viewed as almost commonplace. Identifying application vulnerabilities and addressing them in a timely manner is a crucial component to maintaining a secure environment. The DoD clearly recognizes that vulnerabilities in application code and runtime web-based applications are a primary attack vector that must be addressed.

Section 933 of the 2013 National Defense Appropriations Act establishes a “baseline software assurance policy” for the DoD. This includes “appropriate automated vulnerability analysis tools in computer software code” during the “entire lifecycle of a covered system.” In other words: testing during development, deployment, and maintenance is required for DoD software. Systems integrators developing software applications for the DoD will also have to adhere to the same standard and show the DoD that they have a system for identifying and remediating vulnerabilities in their products.

IBM® Security AppScan® not only enables organizations to mitigate application security risk and strengthen application security program initiatives, but also helps to achieve regulatory compliance.

Register today to hear IBM Security experts discuss how IBM AppScan: 

• Enhances web application security and mobile application security
• Improves application security program management and strengthens regulatory compliance
• Scans your web and mobile applications prior to deployment
• Enables you to identify security vulnerabilities and generate reports and fix recommendations

Sign up now or click here to register for future access to the archived recording if you are unable to attend.

Sincerely,

John Howard 
IBM Security Government at
ESVA Inc.
703-673-9026  (Direct)
877-378-2462  (Toll-Free)
john.howard@esvainc.com
www.esvainc.com/ibm