Tuesday, February 24, 2009

Security Innovation Unveils eKnowledge Products to help Development Teams Build Secure Software

Security Innovation Unveils eKnowledge Products to help Development Teams Build Secure Software

Leveraging its long history as a software security consultancy, vulnerability analyst, and trainer to the Fortune 500, Security Innovation has launched two eKnowledge products to help companies mitigate growing software security risks. Putting Security Innovation's expertise and training methodologies online gives organizations a way to cost-effectively bolster software security even as the economy forces many to cut IT spending.

Wilmington, Mass. -- Leveraging its long history as a software security consultancy, vulnerability analyst, and trainer to the Fortune 500, Security Innovation has launched two eKnowledge products to help companies mitigate growing software security risks. Putting Security Innovation's expertise and training methodologies online gives organizations a way to cost-effectively bolster software security even as the economy forces many to cut IT spending.

The new eKnowledge offerings consist of Web-based learning and software security guidance to help developers build security into their software from application conception through deployment. This dramatically reduces an organization's information risk and improves compliance with corporate standards and industry regulations.

TeamProfessor is a library of e-learning courses on cryptography, security testing, J2EE coding, ASP.NET coding, and cross-site scripting with JSP and ASP.NET. Hosted by Security Innovation, TeamProfessor is available to any individual or organization seeking to improve software and information security knowledge at a fraction of the cost of instructor-led training. Browser-based, it requires no plug-in software to install, manage, troubleshoot or update. It has full start/stop/rewind/forward functionality, simulations, quizzes and compliance with the AICC and SCORM e-learning standards. Individuals who complete courses in TeamProfessor earn continuing professional education (CPE) credits needed to maintain CISSP and CSSLP certifications.

TeamMentor Enterprise Edition is a just-in-time security guidance system that gives IT and development teams all the expertise they need, organized and in one place, to consistently build and deploy more secure software. Instead of Googling for ad hoc advice from apocryphal sources, users turn to the TeamMentor knowledge base for rapid access to relevant best practices, methodologies, rules, code snippets, libraries checklists, technical terms, blogs, standards and more. All are documented, vetted and constantly updated by Security Innovation vulnerability assessment teams that encounter and correct security problems every day.

These new eKnowledge solutions foster a secure development lifecycle (SDL) through the requirements, design, coding, testing and deployment phases of an application. A development or IT team with any mix of novices and seasoned security and software professionals can benefit from the training and security guidance, which are geared for a diverse audience.

"We believe in the philosophy that if you teach a person to fish, they can feed themselves for a lifetime," said Security Innovation Vice President of Marketing Nick Allen. "That's essentially why we have packaged our security expertise for organizations and individuals who want to learn software security on demand, economically and at their own pace. All groups within the corporation - from developers to executives - need to build a consistent baseline of security knowledge, and TeamProfessor and TeamMentor help establish that."

Security Innovation's eKnowledge solutions draw on expertise acquired through decades of research, 10 years of security consulting, development of software security products, and instructor-led training delivery.

TeamProfessor and TeamMentor are aimed at software security in particular because most security vulnerabilities exist at the application layer rather than the network layer - in fact, more than 70 percent exist at the application layer, according to the research firm Gartner.

"We chose TeamProfessor because software security has never been more critical, and we wanted top-flight training without compromises," said Keith Wood, application development architect at Progress Energy. "Security Innovation's proven reputation in the field and high-quality content made the decision easy. Since the courses are Web-based, we just email the link around, and our developers learn what they need to learn at their own pace just when it's needed."

"Building security into software at the coding stage is one of the most important steps you can take for the longevity of the application, and enterprise security," said analyst and application security champion Theresa Lanowitz, Founder of the voke, inc. research firm. "Today, all organizations are challenged to deliver strategic value in critical areas such as application security, however, most IT organizations need assistance in understanding how to address application security at the developer level and throughout the lifecycle. The offering of e-learning and on-demand security from Security Innovation addresses this very critical need for today's IT organization."

Pricing and Availability

TeamProfessor courses are available now and include unlimited use by a single user. Pricing starts at US $195 per seat for corporate-wide deployments or $495 for an individual seat. For more information on Security Innovation's e-learning and other courseware see http://www.securityinnovation.com/products/elearning/index.shtml

or call 978.694.1008 x2.

TeamMentor Enterprise Edition is priced at $10,000 per server, which includes a 10-user license and the ability to scale into the thousands of users. More information can be found here: http://www.securityinnovation.com/products/team-mentor/index.shtml.

About Security Innovation

Security Innovation is a leading independent provider of secure software lifecycle management solutions to Fortune 500 companies. Global technology vendors and enterprise IT organizations such as Microsoft, IBM, FedEx, ING, Symantec, Visa, Coca-Cola and GE rely on our security expertise, tools and training to understand and mitigate the security risks in their software. The company is headquartered in Wilmington, Mass., with offices in Amsterdam, The Netherlands, and Seattle, Wash. For more information about Security Innovation, please visit www.securityinnovation.com or call 1.978.694.1008 (USA) 31 (0) 20 301 9150 (non-U.S).

###



Contact Information Darby Johnson

Security Innovation

http://www.securityinnovation.com

603-559-5809

Maureen Robinson

Security Innovation

http://www.securityinnovation.com

978-694-1008



[Via http://www.prweb.com]

No comments:

Post a Comment