Application

Application Security Assessment

Are you planning to launch new applications that will allow your customers on the Internet to access their private information stored on your production systems? Are you confident that they have been designed and implemented properly to contain the necessary security functions to protect your customer's information and your business? Will the technology and processes of your infrastructure be stressed to the point where they will not be sufficient to protect your production systems and information when these new applications are rolled out?

With SSG's Application Security Assessment, you will get the added confidence of a comprehensive, independent review. SSG's security consultants will conduct an in-depth, end-to-end review of your business application: the application's architecture, design and function; its development and maintenance processes; its operational processes and technology components including the platform it runs on, the networking services used, and any data base or operating platforms services used.

SSG security consultants will conduct interviews with key managers and staff members responsible for the development, maintenance, deployment, and operations related to the application. Processes and technology will be reviewed to ensure that key application security dependencies are met. And, new security relevant code in the application and supporting infrastructure services will be reviewed for common errors that can compromise the integrity of your production environment when the application is deployed.

Range of Services

• meetings with members of the application development teams to understand the overall application architecture, design and its related development processes
• reviews of the application's business security requirements, architecture specifications, functional specifications and test plans
• analysis of selected application code for common security vulnerabilities related to implementation
• analysis of the operating system platform, DB, network, and legacy system security services used by the application for new security vulnerabilities
• validation of any security dependencies that the application has on components and processes in your existing infrastructure
• reviews of the application and associated processes with respect to your organization's security policies and standards
• a detailed final report describing the strengths and weaknesses found, conclusions and recommended actions, and a summary recommendation about the "production readiness" of the application