January 2008

BugSec Products

Challenges Data security aspects become a critical elements in modern companies proceeding. Many organizations are required to comply with information security standards, such as PCI, BASEL II, HIPAA, SOX and more Because of these regulations and threats, implementation of a new software or system becomes very painful and takes a long time

The Present Situation Security problems may cause unnecessary costs and schedule delays Systems must undergo penetration tests before production At the final stage, the development of each solution necessitates the investment of extensive resources Conclusion: The implementation of security means during the development process saves time and money

Fact NIST (National Institute of Standards and Technology): …the cost of fixing defects after deployment is almost fifteen times greater than detecting and eliminating them during development

Sec2Pro Functions Increases awareness to the importance of information security Implements security best practices into development processes Automates procedures, ensures their assimilation by programmers, keeps track of their implementation in practice Receives feedback from programmers regarding adherence to guidelines Produces control reports for management (Cont.)

Sec2Pro Functions (cont.) Significantly reduces penetration testing times Verifies compliance with required standards and regulations Provides programmers with ongoing updates regarding threats and newly issued regulatory requirements

Sec2Pro Integrated hardware (appliance) / software system Straightforward assimilation and operation Translation of regulations and standards into specific instructions Broad knowledge base for all development environments and infrastructure Intuitive, efficient and accessible knowledge base Ongoing updates regarding technological issues and regulatory requirements Online communication among all project components through one system

Sec2Pro Sec2Pro Sec2Code includes 2 configurations: Notifier – tracks code writing and refers the programmer to relevant information in the knowledge base Project Checklist – manages security aspects during programming Sec2Net Procedures and a checklist for hardening IT infrastructures

Opening a New Project Opening a new project includes the participants, software languages and regulations Click to enlarge

Back

Interrogation & Input Data The system generates a checklist according to the project definitions Click to enlarge

Back

Programmer Support The system provides the programmer with detailed explanations, including suggestions on how to resolve a variety of problems – from fundamental issues to examples of relevant codes Click to enlarge

Back

Reporting Tools The system provides managers with on-line progress reports Click to enlarge

Back

Sec2Code Notifier Subtle pop-up notification appears when an object requires attention A hyperlink directs to the relevant page in the knowledge base The application is transparent to the user Click to enlarge

Back Sec2Code Notifier

System Benefits Unique open architecture module Ability to add checklists of any kind Organizations can independently construct tailored development environments meeting their specific needs Shorter penetration testing times Ability to set earlier project launch dates Reduced dependency on external consulting services

Thank You For more details cont us: 11 Moshe Levi St., Rishon le Zion 75070, Israel Tel: | Fax: | Visit us at our website: