Best of Both Worlds: Correlating Static and Dynamic Analysis Results
Report
Jeremiah GrossmanFollow
Mar. 11, 2010•0 likes•2,704 views
Best of Both Worlds: Correlating Static and Dynamic Analysis Results
Mar. 11, 2010•0 likes•2,704 views
Download to read offline
Report
Technology
One of the only guarantees in life is that the first time you analyze a piece of software for security vulnerabilities, you're going to find them. Whether you’re using static or dynamic analysis, prioritizing defects for remediation can strain any organization. This session will demonstrate methods for integrating analysis techniques and show how a combined approach gives better results.
Jeremiah GrossmanFollow
Recommended
Where Flow Charts Don’t Go -- Website Security Statistics Report (2015)Jeremiah Grossman
15 Years of Web Security: The Rebellious Teenage YearsJeremiah Grossman
No More Snake Oil: Why InfoSec Needs Security GuaranteesJeremiah Grossman
WhiteHat Security 8th Website Security Statistics ReportJeremiah Grossman
2014-15 Cybersecurity Venture Funding and M&ANick Normile
Insuring your future: Cybersecurity and the insurance industryAccenture Insurance
More Related Content
What's hot
SVB Cybersecurity Impact on Innovation Report - OverviewSilicon Valley Bank
Improve your security, minister tells major firmsJohn Davis
FRISS_Insurance fraud report 2020 FinTech Belgium
Cyber_security_survey201415_2Stephanie Crates
The cyber-chasm: How the disconnect between the C-suite and security endanger...The Economist Media Businesses
Protecting the brand—cyber-attacks and the reputation of the enterprise The Economist Media Businesses
Similar to Best of Both Worlds: Correlating Static and Dynamic Analysis Results
Penetration testing dont just leave it to chanceDr. Anish Cheriyan (PhD)
OWASP: Building Secure Web Appsmlogvinov
Core.co.enterprise.deck.06.16.10Core Security Technologies
Security assessment with a hint of CISSP PrepEnterpriseGRC Solutions, Inc.
How PCI And PA DSS will change enterprise applicationsBen Rothke
Application Portfolio Risk Ranking: Banishing FUD With Structure and NumbersDenim Group
More from Jeremiah Grossman
All these vulnerabilities, rarely matterJeremiah Grossman
How to Determine Your Attack Surface in the Healthcare SectorJeremiah Grossman
The Attack Surface of the Healthcare IndustryJeremiah Grossman
Exploring the Psychological Mechanisms used in Ransomware Splash ScreensJeremiah Grossman
What the Kidnapping & Ransom Economy Teaches Us About RansomwareJeremiah Grossman
What the Kidnapping & Ransom Economy Teaches Us About RansomwareJeremiah Grossman
![WhiteHat Security Website Statistics [Full Report] (2013)](https://cdn.slidesharecdn.com/ss_thumbnails/wpstatsreport052013-130502135957-phpapp01-thumbnail.jpg?width=1600&height=908&fit=bounds)
![WhiteHat’s 12th Website Security Statistics [Full Report]](https://cdn.slidesharecdn.com/ss_thumbnails/wpstatssummer1212th-120702164437-phpapp01-thumbnail.jpg?width=1600&height=908&fit=bounds)
Recently uploaded
Machine learning with quantum computersSpeck&Tech
info_session_gdsc_tmsl .pptxNikitaSingh741518
Take Control of Podcasting thanks to Open Source and Podcasting 2.0🎙 Benjamin Bellamy
Easy Salesforce CI/CD with Open Source Only - Dreamforce 23NicolasVuillamy1
Cloud Composer workshop at Airflow Summit 2023.pdfLeah Cole
LLaMA 2.pptxRkRahul16
Best of Both Worlds: Correlating Static and Dynamic Analysis Results
- 8. Anti-Virus
- 14. Binary or byte-code analysis
- 15. Benefits
- 16. 100 percent code coverage
- 17. Early in SDLC
- 18. Drawbacks
- 20. Quick and easyto get started
- 23. Drawbacks
- 24. Not integrated into SDLC
- 29. 22,776 verified custom web application vulnerabilities
- 30. Data collected from January 1, 2006 to October 1, 2009
- 32. 64% of websites currently have a HIGH, CRITICAL, or URGENT issue
- 33. 61% vulnerability resolution rate with 8,902 unresolved issues remaining
- 34. Average # of HIGH, CRITICAL, or URGENT severity vulnerabilities per website during the vulnerability assessment lifetime: 16.7
- 53. Packages