With the ubiquity of web and cloud-based software applications, not only are they essential tools to interconnect enterprises with their customers and prospects, but they are now also an ever-present target. Threat actors continuously capitalize on software application security flaws to steal customer information, expose sensitive customer records and, ultimately, hurt a business’ reputation. In a recent competitive analysis, ABI Research, a leader in technology market intelligence, investigates the importance of software security, anticipating the security testing market to develop to $6.9 billion by 2020, and why secure software development remains a challenge for most businesses today.
Read ABI Research’s Secure Software Development Tools report.
“The biggest challenge for company software developers lies in market forces and funding,” says Monolina Sen, Senior Analyst at ABI Research. “Their incentives, and consequentially their priorities, are tied to implementing new features and meeting deadlines. With companies always aiming to shorten product cycles, app security is usually among the first add-on to be cut.”
Traditionally, security audits and quality assurance testing happen toward the end of the development cycle, by which point most security issues are expensive to fix and developers would prefer to focus on releasing the features in a timely fashion, rather than re-coding problem areas. The changing threat landscape and increasing frequency of application attacks, however, is forcing security-focused organizations to more adequately address web application security through secure software development. As such, application security testing is becoming crucial for organizations to adhere to compliance regulations, while at the same time defending themselves from security attacks.
Major vendors in the security testing market include Applause, Cisco, Contrast Security, HP, McAfee, NT Objectives, PortSwigger, Rapid7, Trustwave and WhiteHat Security. In this report, ABI Research reviewed the software security approaches of six industry vendors: Acunetix, Checkmarx, Cigital, IBM, Qualys and Veracode. The report highlights current software security development trends and provides insight into the secure software development solutions existing in the market, as well as their effectiveness.
Notably, the industry recognizes Static Application Security Testing, or white-box testing, as one of the most effective ways to eliminate software flaws. By solving the problem at the code level, static testing reduces the number of security-related design and coding defects. SAST offers many advantages; the biggest being that it can detect complex vulnerabilities that are not visible without access to the source code. In addition, SAST helps users locate the precise location of any flaw in the source code, which makes it an extremely useful methodology.
“Implementing a robust web application security practice offers an incomparable advantage in allowing development teams to identify known security exposures before potential hackers through defective code detections, patch checks and comprehensive evaluations of user authentication services,” concludes Sen.
These findings are part of ABI Research’s Cybersecurity Technologies Service, which includes research reports, market data, insights and competitive assessments.
About ABI Research
For more than 25 years, ABI Research has stood at the forefront of technology market intelligence, partnering with innovative business leaders to implement informed, transformative technology decisions. The company employs a global team of senior analysts to provide comprehensive research and consulting services through deep quantitative forecasts, qualitative analyses and teardown services. An industry pioneer, ABI Research is proactive in its approach, frequently uncovering ground-breaking business cycles ahead of the curve and publishing research 18 to 36 months in advance of other organizations. In all, the company covers more than 60 services, spanning 11 technology sectors. For more information, visit www.abiresearch.com.
About ABI Research
ABI Research is a global technology intelligence firm uniquely positioned at the intersection of technology solution providers and end-market companies. We serve as the bridge that seamlessly connects these two segments by providing exclusive research and expert guidance to drive successful technology implementations and deliver strategies proven to attract and retain customers.
ABI Research 是一家全球性的技术情报公司，拥有得天独厚的优势，充当终端市场公司和技术解决方案提供商之间的桥梁，通过提供独家研究和专业性指导，推动成功的技术实施和提供经证明可吸引和留住客户的战略，无缝连接这两大主体。
For more information about ABI Research’s services, contact us at +1.516.624.2500 in the Americas, +44.203.326.0140 in Europe, +65.6592.0290 in Asia-Pacific, or visit www.abiresearch.com.
Asia: +65 6950.5670