bugtraq - Q1 2007 Application Security Trends Report

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 22 May 2007 12:23:10 -0700
From: "Tom Stracener" <strace@...il.com>
To: webappsec@...urityfocus.com, bugtraq@...urityfocus.com
Subject: Q1 2007 Application Security Trends Report

Cenzic's CIA Labs has recently finished up its Q1 2007 Application
Security Trends Report. The full report is available at the URL below:

http://www.cenzic.com/pdfs/CZ_AppSecTrnds_Rev4.pdf

You can read my blog post about the Trend Report below:

http://secureweb.typepad.com/secure_web/2007/05/q1_2007_applica.html

We examined vulnerability data for the period, attack and probe data
from SANS ISC and DShield, and highlighted important application
security events that occured during the Q1 2007 time-frame.
Additionally we drew upon data from Cenzic's ClickToSecure service to
point to the types of vulnerabilities we found to be most common in
the wild.

I hope our readers enjoy this report as much as we enjoyed putting it together.

Best Regards,

Tom Stracener
Sr. Security Analyst
Cenzic Inc.