gartner web应用防火墙能够支持应用安全开发（Gartner web application firewall can support application security development）.docVIP

gartner web应用防火墙能够支持应用安全开发（Gartner web application firewall can support application security development） Washington National Harbor - information security team of the enterprise has been trying to defend the safety of software development, but due to many reasons have been defeated. Thats why Gartner, an analyst, thinks its time to shift the focus of the strategy to using the Web application firewall to enhance applications as part of a broader application security architecture. At the Gartner security and risk management summit, speaker Ramon Krikken bluntly stated that the current application of enterprise security is not good. He is vice president of research at Gartner, a company based in Standford, Connecticut. Krikken cited statistics from WhiteHat Security Co. Ltd., the data indicate that the application of Web is almost 1/3 in the past year is vulnerable to SQL injection attacks, and more than 2/3 Web cross site scripting flaw. The same WhiteHat Security estimates the banking sector will take 400 working days to defects existing in application a re 90% patch, Krikken quoted the data because the banking sector may have to install patches for application or do the best. There is no research results too much in addition to this survey, but many anecdotal evidence, and I discuss with customers and colleagues, in fact between the security team and the development team of enterprises to establish a cooperative relationship is not good, said Krikken. The security guys wrote the report and said to the developers, here, look at this. . It seems unlikely that this will help to do the job well. Krikken said the security team is the frustrating reality is developers who has never been motivated to solve the problem of security application, unless there is safety after the accident, or to meet compliance requirements will be forced to do so. If you look at peoples way of doing things: they will do whatever they are asked to do, no more, no more, according to how they ar