Explore Sembi IQ - The AI engine powering the next generation of intelligent quality

AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: Industry AppSec

Recent Posts

5 Tips for Developing Secure Financial Applications

Most financial services providers have an option that customers can use to access various services at their convenience. Unfortunately, security continues to be a cause of concern for anyone planning to enroll in mobile/online banking services.

Industry AppSec Risk Management

Proactive Security Scanning and Testing Pre-Empts Attacks

Best security practices dictates that avoiding trouble is faster, cheaper and easier than fixing trouble after it manifests.

Industry AppSec Software Testing

Proactive choosing of code scanning tools graphic

Social Engineering: How Prestidigitation Is at Its Heart

Social engineers use many of the same techniques to create an illusion in order to gain a victim’s trust and trick the person into doing their dirty work. They are essentially magicians, with the intent to derive some direct value by deceiving victims. ...

Industry AppSec Thought Leadership

Static Analysis in Automated Software Quality Tests

Software quality management solutions use automated tests and static analysis to generate software quality metrics. With the ability to parse code in almost every commonly used programming language, static analysis is useful...

Industry AppSec Software Testing

The Worst AppSec Mistakes to Avoid

Application security people, like anyone else, can make mistakes. Hasty actions and bad assumptions lead to a less complete discovery of flaws — or to outright disaster. In the worst case, A clumsy attempt to discover security problems can itself cause a brea...

Industry AppSec Thought Leadership

What Is Application Security?

The conversation surrounding application security could go a thousand different directions, technology is a massive landscape after all. For the purposes of this discourse, our focus will be on three particular arms of appsec. Perhaps we could call them the G...

Industry AppSec Thought Leadership

6 Major Security Advantages of Open Source

The concept of open source software has shifted considerably from what some enterprises once thought about it. Any negative thoughts then were all misconceptions or not understanding what open source really is. Considering open source software is often free o...

Industry AppSec Thought Leadership

How NIST SP 800-53 Revision 5 Affects Application Security

The National Institute of Standards and Technology (NIST) is a non-regulatory agency of the U.S. Department of Commerce that, among other things, maintains physical science laboratories and produces guidance for assessing compliance with a wide range of stand...

Industry AppSec Risk Management

Why GDPR Makes Application Security More Important Than Ever

With the coming of GDPR, the stakes in application security get still higher. There are plenty of reasons for concern already; theft of confidential data can lead to liability, serious financial losses, and damage to reputation. GDPR adds fines as high as 10 ...

Industry AppSec Risk Management

How to Gain Full Control of Open-Source Components

Almost every developer relies to some degree on open source software, and it’s tough to beat the flexibility of open use and distribution licensing. However, it’s also critical that all developers understand how to control open source components. There are se...

DevSecOps Industry AppSec

Application Security: A Must-Have for Business Success

There is almost an endless list of reasons why application security is important to businesses. Those range from maintaining a positive brand image to preventing security breaches that impact the trust that your clients and shareholders have in your business....

Industry AppSec Thought Leadership

How to Secure Serverless Applications

Although the term says “serverless,” serverless applications don’t really run without any servers involved. Rather, serverless applications run inside cloud-based infrastructures so that developers and operators need no longer stand up and run their own serve...

Industry AppSec Thought Leadership