|
2factor's Real Privacy Management and Fortify Software's Fortify Source Code Analysis Suite are highlighted in a discussion of companies' demands in 2006 for security that is pre-built into new software and systems. Results of Information Week's Outlook/Priorities 1Q 2006 survey of 300 business technology professionals show that the third-highest priority among respondents is the updating of security tools, policies, and procedures. However, only 62% of respondents pinpointed security as a top priority, which is the lowest percentage of the six priority studies done by Information Week Research previously, and is also 20 percentage points lower than reported in January 2005. Analyst Paul Stamp of Forrester Research says There's a shift in spending from add-on threat prevention to building in security from the ground up. Software vendors are taking a like approach and will soon show that they are trying harder to release products that require fewer patches from Microsoft, Oracle, and other companies. For instance, Oracle will begin using Source Code Analysis to seek out possible vulnerabilities in software under development, including its application server, collaboration suite, database server, and identity management software. Fortify was chosen by Oracle for its unusual ability to analyze a code base the size of Oracle's, which has a technology stack of over 30 million lines of code and continuously changes as Oracle develops new versions of software. Oracle also found the Fortify software to be more accurate than any other code analysis tools tested at Oracle. Among topics covered are a framework from the Liberty Alliance Strong Authentication Expert Group and 2factor Real Privacy Management's ability to authenticate and encrypt every transmission for sender and receiver across any network on any device. The latter ability is not supported by Secure Sockets Layer (SSL) encryption.
|