Skip to main content

The first time you sign into developerWorks, a profile is created for you. Select information in your profile (name, country/region, and company) is displayed to the public and will accompany any content you post. You may update your IBM account at any time.

All information submitted is secure.

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

All information submitted is secure.

My developerWorks:

My notifications:

Sign out

Select a language:

Background image for security site banner

Tab navigation

Tab navigation

Secure IT operations
Secure software development - selected tab,

Secure software development

Top story

Configuring AppScan Source

Derek Chowaniec demonstrates how to configure IBM Security AppScan Source edition by importing source code.

More on secure software development

Featured topics

DevOps distilled: A new look at DevOps. In this series of articles, learn about DevOps and how it can: create a collaborative relationship between development and IT operations; enable high deployment rates; and increase the reliability, resilience, and security of your production environment.

Extend IBM Security Access Manager for ESSO AccessProfile with Windows native libraries. Develop and embed a Windows native library inside an ISAM ESSO AccessProfile. An example walks you through the steps of the COM component registration based on the sample library.

Look-ahead Java deserialization. When Java serialization is used to exchange information between a client and a server, attackers can try to replace the legitimate serialized stream with malicious data. Understand the nature of this threat and learn a simple way to protect against it.

Cyber security for the nuclear energy industry. An effective security program hinges on a solid collaboration process during product development and delivery efforts.

Security in Development: The IBM Secure Engineering Framework. Examine secure engineering practices for software products, and get a description of an end-to-end approach to product delivery, with security taken into account.

Why software quality assurance and IT security need to work together. Examine a new approach to security, with the software development and software quality assurance teams working together to be exponentially more effective.

Developing secure Web applications: An introduction to IBM Rational AppScan Developer Edition. Understand the role developers should play in improving web application security, and get details how IBM Rational AppScan Developer Edition enables them to do so.

Customize container-managed security with AuthenticRoast. Minimize configuration impact on Java Enterprise Edition containers using AuthenticRoast, and greatly reduce coding effort for custom security requirements. A downloadable WAR with demonstration code is provided.