Neil MacDonald: Security No-Brainer #9: Application Vulnerability Scanners Should Communicate with Application Firewalls

August 19, 2009

If a web application security testing tool tells me I have a vulnerability in an application, what do I do? "Fix it" is the right answer, but not always so easy if my development organization is backlogged or, worse, I don't have access to the source code. Another answer is to shield the application from attacks on the vulnerability using an application-level firewall - in this example a web application firewall.

Click the URL above to read the full article