[Wonder-disc] Automated web application security assessment tools

[Kantala, D. R. <dka...@mo...>]

We are trying to find an application that does automated vulnerability
detection for example IBM Rational AppScan.

What we found was AppScan does not know how to handle WebObject¹s ³crazy²
way of doing URLs .  It tries to find all the URLs of a site for testing,
which of course is basically infinite.

Has anyone else found something similar that works or possibly have AppScan
working nicely with WebObjects?

This may seem a little off topic, but in reality its testing WebObjects and
the Wonder frameworks as well.

DK


Confidential & Privileged

Unless otherwise indicated or obvious from its nature, the information contained in this communication is attorney-client privileged and confidential information/work product. This communication is intended for the use of the individual or entity named above.  If the reader of this communication is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.  If you have received this communication in error or are not sure whether it is privileged, please immediately notify us by return e-mail and destroy any copies--electronic, paper or otherwise--which you may have of this communication.