Web Application Security: Automated Scanning versus Manual Penetration Testing

Research has shown that a vast number of Web sites are vulnerable to Web application attacks and that a great percentage of these attacks occur over the HTTP/S protocols, ports that are often exposed to the entire online community. With these facts in mind, it's essential for organizations to take serious measures to help secure their Web applications.

As Web applications become increasingly complex, tremendous amounts of sensitive data-including personal, medical and financial information-are exchanged and stored. Consumers expect and even demand that this information be kept secure. There are two primary methods for discovering Web application vulnerabilities: using manual penetration testing and code review or using automated scanning tools and static analysis. The purpose of this paper is to compare these two methods.

Already a Bitpipe member? Log in here

Download this White Paper!

• Corporate Email Address:

  You forgot to provide an Email Address.

  This email address doesn’t appear to be valid.

  Please provide a Corporate Email Address.

  This email address is already registered. Please log in.

• First Name:

  You forgot to provide your first name.

• Last Name:

  You forgot to provide your last name.

• Company Name:

  You forgot to provide a company name.

• Job Title:

  You forgot to provide a job title.

• Seniority: C-Level / Executive Team EVP / SVP / VP / AVP Director Manager Architect Analyst Staff

  You forgot to select your seniority.

• Job Function:

  You forgot to select your job function.

• # of employees: Select number of employees... 10,001+ 5,001-10,000 1,001-5,000 501-1,000 251-500 101-250 11-100 1-10

  You did not select the number of employees at your company.

• Industry: Select... Agriculture/Forestry Architecture and Engineering Automotive Aviation & Aerospace Business services Civic & Social Organization Construction Consumer Goods & Services Education Electrical/Electronic Manufacturing Financial/Banking Government & Public Policy Healthcare Insurance (non-Healthcare) Legal services Manufacturing/Industrial Oil/Gas/Mining/Other natural resources Outsourcing/Offshoring Photography Publishing/Broadcast/Media Real Estate Recreation/Entertainment Research and Consulting Retail Technology Transportation/Distribution Travel/Hospitality Utilities Veterinary Wholesale Wireless

  You did not select which industry you are in.

• Sub-Industry:

  You did not select which industry you are in.

• Address 1:

  You did not provide a full local address.

• Address 2:
• City/Town:

  You did not provide a full local address.

• Country: Select... Afghanistan Aland Islands Albania Algeria American Samoa Andorra Angola Anguilla Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivia Bonaire, Sint Eustatius and Saba Bosnia and Herzegovina Botswana Brazil British Indian Ocean Territory Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Congo, The Democratic Republic of the Cook Islands Costa Rica Cote D'Ivoire Croatia Cuba Curaçao Cyprus Czech Republic Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands Faroe Islands Fiji Finland France French Guiana French Polynesia Gabon Gambia Georgia Germany Ghana Gibraltar Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Honduras Hong Kong Hungary Iceland India Indonesia Iran Iraq Ireland Isle of Man Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Korea, North Korea, South Kosovo Kuwait Kyrgyzstan Laos Latvia Lebanon Lesotho Liberia Libya Liechtenstein Lithuania Luxembourg Macau Macedonia Madagascar Malawi Malaysia Maldives Mali Malta Marshall Islands Martinique Mauritania Mauritius Mayotte Mexico Micronesia Moldova Monaco Mongolia Montenegro Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Oman Pakistan Palau Palestine Panama Papua New Guinea Paraguay Peru Philippines Pitcairn Islands Poland Portugal Puerto Rico Qatar Reunion Romania Russia Rwanda Saint Barthélemy Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia Seychelles Sierra Leone Singapore Sint Maarten Slovakia Slovenia Solomon Islands Somalia South Africa South Georgia and the South Sandwich Islands South Sudan Spain Sri Lanka Sudan Suriname Svalbard and JanMayen Islands Swaziland Sweden Switzerland Syria Taiwan Tajikistan Tanzania Thailand Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United Kingdom United States United States Minor Outlying Islands Uruguay Uzbekistan Vanuatu Vatican City Venezuela Vietnam Virgin Islands (British) Virgin Islands (U.S.) Wallis and Futuna Western Sahara Yemen Zambia Zimbabwe

  You did not select the country you are from.

• State/Province:

  You did not provide a full local address.

• Zip/Postal Code:

  You did not provide a full local address.

• Phone:

  You forgot to provide a phone number.

  This phone number format is not recognized. Please check the country and number.

• • I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.

  Please check the box if you want to proceed.

• • I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.

  Please check the box if you want to proceed.