WhiteHat Sentinel Source

1. Day in the Life of a Developer
…with WhiteHat Sentinel Source

2. “I roll out of bed and check my tickets…”

3. “I roll out of bed and check my tickets…”

4. “I roll out of bed and check my tickets…”
 Notices a new vulnerability
 Produced by ticketing integration
 Viewing verified & actionable result
 15+ supported systems, including…

5. “I fire up my IDE and triage my issues…”

6. “I fire up my IDE and triage my issues…”
 Search application vulnerabilities

7. “I fire up my IDE and triage my issues…”
 Search application vulnerabilities
 Step through vulnerability in code

8. “I fire up my IDE and triage my issues…”
 Search application vulnerabilities
 Step through vulnerability in code
 Review remediation guidance

9. “I fire up my IDE and triage my issues…”
 Search application vulnerabilities
 Step through vulnerability in code
 Review remediation guidance
 Ask for help from TRC

10. “I fire up my IDE and triage my issues…”
 Search application vulnerabilities
 Step through vulnerability in code
 Review remediation guidance
 Ask for help from TRC
 Apply Directed Remediation patch if
available

11. “I commit the fix and update the ticket…”

12. “I commit the fix and update the ticket…”
 Updates ticket to reflect the fix

13. “I commit the fix and update the ticket…”
 Updates ticket to reflect the fix
 Moves ticket to Q&A

14. “I commit the fix and update the ticket…”
 Updates ticket to reflect the fix
 Moves ticket to Q&A
 Source scan triggered via schedule

15. “I commit the fix and update the ticket…”
 Updates ticket to reflect the fix
 Moves ticket to Q&A
 Source scan triggered via schedule
 Ticket auto-updated to reflect results

16. Security Enhanced Developer Tooling
... during notification
… during triage
… during verification

17. Integration with Developer
• Atlassian JIRA
•…many more using WIS
•Eclipse
•IntelliJ
•Xcode
•Visual Studio
• Git
• SVN
• Perforce
• CVS
• TFS
•HTTP/S
•SFTP
•Java
•C#.Net (incl. ASP.Net)
•Objective-C (incl. iOS)
•PHP
•Java Script
•HTML5
•Android
Languages Code Repo
Bug
Tracking
IDE
Plugins

18. WhiteHat Integration Server (WIS)
Bug Tracking & ALM Systems
Atlassian JIRA Microsoft Team Foundation Server
Atlassian JIRA Service Desk ThoughtWorks Mingle
Borland StarTeam (Dev Services
Required)
Rally
HP ALM VersionOne
HP Quality Center Bugzilla
IBM Rational Team Concert (Rational
Quality Manager)
Serena Business Manager
IBM Rational Requirements Composer ServiceNow (Deployment Services may
be required)

19. “I review significant vulns with my security team…”

20. “I review significant vulns with my security team…”

21. “I review significant vulns with my security team…”

22. “I review significant vulns with my security team…”

23. “I review significant vulns with my security team…”

24. THE FRONT LINE
Of Application Security