|
i-Watch – Application Attack & Vulnerability Sensor Understanding your applications
As the strategic roles that web applications play grow in importance, the benefits for any organisation are many: agility, reactivity, performance. But this dynamic trend also keeps IT departments busy with the management and security issues related to applications of which they often only have partial knowledge. Factors contributing to the shortcomings are differences in jobs, culture and objectives as well as outsourced development. To address these issues the two primary requirements are knowledge and understanding. When it comes to application security, what are the issues at stake? Where and why do sensitive areas exist? And what are your options when dealing with them?
Organisations have to consider these questions in order to find bespoke solutions for each application, and not just apply theoretical and general technologies. In short, your application security policy has to be progressively tailored to your needs.
Continuous and dynamic assessment
Quick and easy to deploy because it is a traffic monitoring tool, i-Watch identifies, assesses and classifies the varied information running through applications. It not only informs but also advises; incorporated into the solution, the knowledge centre contains valuable explanations on potential risks, enabling i-Watch to recommend different remedial measures to the application administrator.
i-Watch possesses a technological edge as the first truly dynamic and continuous web application monitor, suited to the ever-changing web environment. Throughout the life cycle of the application, from preproduction to post-deployment, it automatically highlights structural changes and reports on any sensitive or weak resources from web traffic and also, uniquely, on anomalous traffic behaviour.
i-Watch, business confidence through trusted application delivery.
Features
Qualification- Application discovery
- Resource identification
- Sensitive script detection
- Sensitive spplication detection
- Ambiguous resource detection
- Unnecessary artefact detection
Monitoring- Support for several traffic capture modes:
Real Time using transparent sniffer
Web server log file
TCP dump file
i-Sentry and i-Trust logs
Attack detection- Automated Process Detection
Risk Assessment- Weak and sensitive resource analysis
- Incriminated parameter identification
- Potential risk measurement
Download the datasheet View i-Watch Flash Demo |
