ÊAdvertise ÊContact ÊSecurityWatch

GFI MailArchiver for Exchange - Easily archive Exchange Server mail & comply with Sarbanes Oxley - Free evaluation available. Network Security Software - Sponsored by GFI Network Security.

Segue Software and Security Innovation Collaborate to Optimize Software Quality and Minimize Security Defects Publication date: Wednesday, 11 May 2005 LEXINGTON, Mass. & WILMINGTON, Mass.--May 11, 2005--The security vulnerability of software applications is reaching epidemic levels. Common practices such as focusing on network security or performing cursory security testing are not enough to protect businesses from security breaches. That is why Segue Software (NASDAQ-SCM: SEGU), the leader in software quality optimization(TM) (SQO(TM)), and Security Innovation, the leading independent provider of application security services, today announced a joint solution enabling organizations to develop secure, high quality software applications. The solution is composed of Segue's industry-leading SQO solutions and Security Innovation's application security testing and training services. Many organizations mistakenly assume that network security measures will curb the majority of attacks that take place against corporate systems. However, industry research has shown that nearly 70 percent of all attacks are against the application layer and not the network layer. Segue provides proven technology and expertise in testing for and identifying software defects and raising overall software quality. Security Innovation brings unmatched expertise in security defect testing and application security training. Together, Segue Software and Security Innovation can offer organizations an end-to-end solution for software and security defect testing and remediation, resulting in higher-quality, more secure applications. As a result, customers can reduce the number of security events, such as identity theft, data loss and network outages that tarnish public image and increase legal and compliance risk. Segue is dedicated to delivering quality optimization solutions that ensure the accuracy and performance of enterprise applications throughout the entire software lifecycle. Traditionally, Segue's solutions accelerate the deployment of high-quality applications by integrating and promoting collaboration and information flow among all development, quality assurance and production stakeholders. Segue's solutions can also be extended to manage security testing issues. Security Innovation's global customer base relies on the company's unparalleled security expertise in systematically analyzing the highly complex and layered applications dominating today's IT environments for possible sources of security vulnerabilities. The company also delivers custom and proven training to software developers on how to properly build and test applications before they are brought to market. Security Innovation is the first and only company to research and publish a methodology for finding security defects in software. "Application security is a very challenging problem that directly impacts software quality; an application can perform perfectly - but still be very vulnerable to security threats. Security testing requires specialized knowledge, tools and expertise in order to adequately ensure an application is ready for full deployment," said Andre Pino, chief marketing officer, Segue Software. "We see a clear trend toward security testing falling more and more under the quality assurance umbrella. Together with Security Innovation, we can provide a comprehensive quality solution - encompassing security assessment - to our mutual customers." "We are in the middle of a major shift in the decision-making process for end-user organizations as it pertains to buying or deploying an application," said Ed Adams, chief executive officer, Security Innovation. "It used to be that features were king and security was an afterthought during development and purchasing. Today, security is a deal breaker--a reality that has sent software vendors scrambling for ways to produce more secure applications. Together with Segue, we are offering a complete way for organizations to solve their traditional software quality and testing problems, while extending their capabilities to areas like secure coding, security vulnerability testing and security defect remediation." The two companies will demonstrate the combined solution for customers during Security Innovation's annual Security Testing Challenge to be held at StarEast, on May 18-19. Segue's testing solutions will be in use at the Security Testing Challenge, demonstrating how security testing can be managed as part of an overall software quality assurance testing initiative. About Segue Software Segue Software, Inc. (NASDAQ-SCM: SEGU) is a global expert in delivering solutions to define, measure, manage and evolve software quality throughout the entire software application lifecycle. Segue's Quality Optimization (SQO) solutions help companies reduce business risk, ensure the deployment of high quality software and increase return on investment. Leading businesses around the world, including many of the Fortune 500, rely on Segue's innovative Silk family of products to protect their business service levels, competitive edge and brand reputation. Headquartered in Lexington, Mass., with offices across North America and Europe, Segue can be reached at + or http://www.segue.com. About Security Innovation Security Innovation, Inc., is the leading independent provider of application security services. Dozens of leading organizations, including Aladdin, Harris Corporation, IBM, ING, Microsoft, SAIC, SAP, Symantec, VeriSign and a number of government agencies, rely on Security Innovation's expertise in application security testing and training to develop, evaluate and deploy more secure applications. More than 60% of the company's staff holds advanced degrees in computer science with 30% at the PhD level. The company is headquartered in Boston, Mass., with technical labs in Melbourne, Fla., Bozeman, Mont. and Brussels, Belgium. For more information about Security Innovation, visit www.securityinnovation.com or call +1.

Sunday, May 22, 2005 Network Security Why security vulnerabilities expand beyond operating system, enterprise How Dangerous Was The Cisco Code Theft? Will 'Internet security' always be an oxymoron? UK banks ignore security audit findings Wireless Security picoChip, Hifn unveil WiMAX basestation reference Why wireless devices must be connected to critical applications Securing 'strange' Wi-Fi devices IT giants fight wireless patent InfoSec Directory Phishing attacks and countermeasures Overview of image security techniques with applications in multimedia systems Inoculating SSH Against Address-Harvesting Worms What is the point of encryption if you don’t know who for? Press Releases nCipher helps combat phishing attacks with Chip and PIN LANDesk Named to 2005 Red Herring Top 100 HP Simplifies Business Protection for Small and Mid-size Businesses with New Smart Office Program Clifford Chance appoints Redbus Interhouse to Provide Pan-European Services

Ê