Web Application Security: AppScan Tutorial
Recently I was approached to write a security tutorial for the IBM developerWorks website, specifically about IBM Rational AppScan. AppScan is the leading commercial Web Application (and infrastructure) vulnerability scanning tool, which IBM acquired from WatchFire last year. I ended up writing a fairly lengthy tutorial, 7000 words plus, which goes to explain why my blog entries have been relative sparse in recent weeks. The Tutorial is called; “ Create secure Java applications productively, Part 2” has been uploaded on the IBM developerWorks website. http://www.ibm.com/developerworks/edu/r-dw-r-appscan2.html . Or you may download a copy directly from here r-appscan2-pdf.pdf The tutorial follows on from an initial tutorial, which involved the creation of an Internet facing Java Web Application using IBM Rational Application Developer and Data Studio. To briefly sum up my Tutorial there is a Web Application Security Overview, how to install AppScan, how to configure a scan, int...