by Billy MacInnes3 October 2008
IBM has
introduced software which it claims can help midsized companies combat external
and internal web security threats and help them to comply with mandatory
regulations.
IBM Rational
AppScan Express Edition is an automated testing system that enables businesses
to test for web application security vulnerabilities and provides advice on how
to fix them.
According to IBM,
the tool also helps companies to comply with regulations such as the Payment
Card Industry Data Security Standard which is designed to prevent credit card
fraud, hacking and other security vulnerabilities and threats.
In a bid to
reinforce the product's relevance, IBM cited a survey from Forrester Research
that revealed regulatory compliance was a priority for 67% of small and midsize
businesses even though most were not fully compliant.
It also referred to the IBM ISS Threat Report which found 54% of all
vulnerabilities disclosed in the first-half of 2008 were web-based.
Steve Solazzo,
general manager at IBM General Business said the product was part of the
company's strategy of providing "comprehensive and cost-effective
solutions through the Express Advantage portfolio to our businesses' partners
enabling them to meet the needs of their customers as well as address their challenges".
He added that IBM
was "determined to ensure the safety of data for our business partner
ecosystem and, in turn, their customers".
IBM has also
partnered with the Aberdeen Group to develop a tool for midsize companies to
assess the existing IT infrastructure and determine where they may be
vulnerable.
The online IT
Security Assessment Tool provides them with suggestions on how they can improve
their IT security based on Aberdeen's
market research.