Google Releases App Security Assessment Tool To Open Source

<a href="http://www.informationweek.com/news/internet/google/showArticle.jhtml?articleID=208803050">InformationWeek</a>

Jim Manico, OWASP Global Board Member

July 8, 2008

1 Min Read

Google has released the code to its Ratproxy application security assessment tool to the open-source community, giving developers a new way to inspect their Web apps.Ratproxy works in the background to detect and prioritize broad classes of security problems, such as dynamic cross-site trust model considerations, script inclusion issues, content serving problems, insufficient XSRF and XSS defenses, according to Google's Web site, where the code is available for free download. Ratproxy works in Linux, FreeBSD, MacOS X and Windows Unix emulator Cygwin environments.

By placing Ratproxy under the Apache 2.0 license, bloggers on ZDnet say the tool has the potential to become a standard feature in Web hosting systems and enterprise stacks. "This can quickly be adapted, and improved, by commercial providers and by enterprises frightened of the GPL?s code-sharing requirements," they said.InformationWeek

Read more about:

2008

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights