When designing Web sites, developers usually focus on the appearance and the back end. And they generally rush to get their e-commerce sites to production, often at the expense of adequate security and testing. In fact, Web applications are the weak link. Security folks have been most concerned with locking down networks, but firewalls can't stop an attack on a poorly structured Web site running over standard ports.

Only a handful of tools can assist with QoS (Quality of Service) testing before applications go live. Enter WhiteHat Security's WhiteHat Arsenal 2.0, a collection of basic tools that help security professionals test Web applications for common security vulnerabilities in the midrange of competitive pricing. But though Arsenal has several good features, the lack of automation for basic operation and nonexistent vulnerability identification will hinder users who don't have solid security and programming backgrounds.

[ Read more ]