The bMighty ANTenna
News From Around The Web


Hardware & Software , Security

Google Releases App Security Assessment Tool To Open Source

Tuesday, July 8, 2008
By bMighty.com Staff

Google has released the code to its Ratproxy application security assessment tool to the open-source community, giving developers a new way to inspect their Web apps.

Ratproxy works in the background to detect and prioritize broad classes of security problems, such as dynamic cross-site trust model considerations, script inclusion issues, content serving problems, insufficient XSRF and XSS defenses, according to Google's Web site, where the code is available for free download. Ratproxy works in Linux, FreeBSD, MacOS X and Windows Unix emulator Cygwin environments.

By placing Ratproxy under the Apache 2.0 license, bloggers on ZDnet say the tool has the potential to become a standard feature in Web hosting systems and enterprise stacks. "This can quickly be adapted, and improved, by commercial providers and by enterprises frightened of the GPL’s code-sharing requirements," they said.

Source(s): InformationWeek




This is a public forum. CMP Media and its affiliates are not responsible for and do not control what is posted herein. CMP Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of CMP Media LLC and may be edited and republished in print or electronic format as outlined in CMP Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.



Browse by Category
Imaging How-To Center

Document imaging basics, plus how to select a solution

go

FREE Technology Services Locator!

Search our database of 200,000 solution- provider locations by business activity, technology, vertical market, and customer size. Find a technology partner NOW.

go

Tech Term of the Day: Berkeley extensions

TechEncyclopedia gives you the meaning of today's word, plus more than 20,000 additional IT terms and definitions.


InformationWeek Business Technology Network
InformationWeekInformationWeek 500InformationWeek 500 ConferenceInformationWeek AnalyticsInformationWeek CIO
InformationWeek EventsInformationWeek ReportsInformationWeek MagazinebMightyByte and SwitchDark Reading
Digital LibraryIntelligent EnterpriseInternet EvolutionNetwork ComputingNo Jitter
space
Techweb Events Network
InteropVoiceConWeb 2.0 ExpoWeb 2.0 SummitEnterprise 2.0 ConferenceMobile Business ExpoSoftware ConferenceCSI - Computer Security Institute
Black HatGTECEnergy CampMashup CampStartup Camp
space
Light Reading Communications Network
Light ReadingLight Reading EuropeUnstrungLight Reading's Cable Digital NewsConstantinopleInternet Evolution
Heavy ReadingLight Reading Live!Light Reading InsiderEthernet ExpoOptical ExpoTeleco TVTower Technology Summit
space
Financial Technology Network
Advanced TradingBank Systems & TechnologyInsurance & TechnologyWall Street & TechnologyAccelerating Wall StreetBank Systems & Technology Executive SummitBuyside Trading SummitInsurance & Technology Executive Summit
space
Microsoft Technology Network
MSDN MagazineTechNetThe Architecture Journal
space