Ensuring Application Quality, Performance & Security to deliver business outcomes

Speaker Background

Jonathan Rende

Jonathan Rende is the vice president of product marketing for Software at HP. He is responsible for product management and marketing activities for the company’s application delivery solutions and integrations across product lines. Previously, he served as vice president of product marketing for Mercury Interactive.

Risk based Penetration Testing

Paper Presentation – at STeP-IN Forum's Software Testing Conference Hyderabad
(September 03, 2010)
K. K. Mookhey, Founder, Network Intelligence India Pvt. Ltd.

Security Testing (including web application security testing) is an extensively discussed topic, and there are numerous books, articles, and online resources that cover the tools and techniques that are available for carrying out a comprehensive exercise. However, during the large number of security testing exercises carried out by professionals, a very important aspect that is often overlooked is the business aspect of the infrastructure they are testing. The focus of security testing exercises seems to be more on technical wizardry and the reports are filled more with jargon, than on understanding the risk that the business faces, and then building security test cases accordingly. The focus of modern-day security testing exercises should be on corporate espionage, financial fraud, and realistic security compromise scenarios.

Psychometric Analysis of Developers and Security Specialists

Paper Presentation at Application Security Testing Conference June 2010

Sameer Shelke, Co-founder, COO and CTO,Aujas Networks

The fact that application or software security issues leads to most attacks, that protection at source is critical, perimeter security is not the only way to manage risk etc. has been known to us for several years now.

However we as an industry always lagging behind software security or the concept of developing secure software. Most times security is an afterthought. There are several ways organizations are solving this issue using technologies, processes, training etc.

A Holistic Approach to Application Security Testing

Paper Presentation at Application Security Testing Conference June 2010

Maheshan C N, Project Leader, L&T Infotech

Application Security testing has come under prime focus of late. The objective of application security is to ensure that the application under test is designed and developed to withstand all possible malicious attacks from its users, whether intentional or unintentional. The challenge has been to find maximum vulnerabilities in an application with the greatest coverage, to ensure that the application that is tested has undergone a thorough check before it faces the reality of usage.

The DSM (Dynamic, Static and Manual) Methodology tries to address this issue by looking at the kinds of vulnerabilities that each of these approaches could unearth in an application, thus ensuring that maximum testing of the application has been conducted and that it can be signed off for deployment with more confidence.