HP Application Security Center (ASC) was a set of technology solutions by HP Software Division. Much of the portfolio for this solution suite came from HP's acquisition of SPI Dynamics.HP to acquire SPI Dynamics for Web security , June 19, 2007 By SearchSecurity.com Staff The software solutions enabled developers, quality assurance (QA) teams and security experts to conduct web application security testing and remediation. The security products have been repackaged as enterprise security products from the HP Enterprise Security Products business in the HP Software Division.
Products
HP Application Security Center consisted of the following products: HP Assessment Management Platform software for managing a web application security testing program across the application lifecycle “HP Assessment Management Platform (AMP) software” HP WebInspect software for web application security testing and assessment“HP Application Security Center WebInspect” HP QAInspect software for standardized web application security testing during quality assurance (QA) testing "HP QA Inspect"
In May 2008, HP Software announced the availability of HP Application Security Center through HP Software as a Service [HP Application Security Goes SAAS, May 27, 2008 By Brian Prince] along with the announcement of new releases of the HP Application Security Center products. HP Helps Businesses Defend Against Malicious Web Attacks with New Application Security Offerings, May 27, 2008
In September 2009, HP announced that it was discontinuing the HP DevInspect software products, formerly part of HP Application Security Center. HP stated that it had switched its focus to solutions for entire development groups rather than on a tool for individual developers. HP DevInspect was software for individual developers to use in creating secure web applications and services, and it integrated with specific IDEs (Integrated Development Environments). HP DevInspect for .NET operated with Microsoft Visual Studio, and HP DevInspect for Java operated with Eclipse or Rational (IBM) Application Developer. “HP DevInspect software
Benefits
HP Application Security Center solutions helped find and fix security vulnerabilities for web applications throughout the application software development lifecycle (SDLC). By catching security vulnerabilities early in the application development lifecycle, organizations could reduce web attacks and vulnerabilities in their web applications. While some security vulnerabilities may exist in the web server or application infrastructure, at least 80 percent of those vulnerabilities existed in the web application itself.“Web apps account for 80 percent of internet vulnerabilities.”
HP Application Security Center also creates compliance reports for more than 20 laws, regulations and best practices, including PCI DSS (Payment Card Industry Data Security Standard).“HP Application Security Center and the Payment Card Industry (PCI) Data Security Standard (DSS)” PCI DSS is a worldwide information security standard defined by the Payment Card Industry Security Standards Council.
More Information on Application Security
Application security SQL injection Cross-site scripting PCI DSS Payment Card Industry Data Security Standard
External links HP Software HP Enterprise Security
References