IBM Rational appscan Enterprise Edition Enterprise Web Application Security, part 2nd

Enterprise-Class Web application Security Solution Example

Objective

We will be from different roles in the enterprise, from the perspective of a developer, security administrator, and department manager, describe in detail how the day-to-day work of each persona is implemented after deploying the IBM Rational ASE Enterprise Web Application Security platform, and how convenient and unified the platform provides them.

A day for developers to Christine

Developer Christine as usual, a day's work starts by opening Outlook and collecting messages. ASE has a mail notification function, when Christine care about an application scan is completed, or a predefined threshold to achieve, the system will automatically send mail, notify her system discovered what security risks. At this time Christine can directly click on the security of the message prompts, login system. As shown in Figure 1.

Figure 1 Developer Christine receive messages from ASE

By mail, Christine opens the page shown in Figure 2. The "Folders" view on the upper left shows the application or system module that Christine has permission to view, which is set by the administrator beforehand. The "recently viewed" view in the lower left shows the report or dashboard that Christine recently visited. The remediation Tasks view on the right lists the module or applies all the tasks that need to be repaired.