CAST Research on the State of Software Security Reveals Riskiest Applications

Cross-industry benchmarking report shows prevalence of CWE densities

New York, USA, and London, UK – November 13, 2017 – CAST, the leader in software intelligence, today announced the findings from its global benchmarking report on the state of software security. The CRASH Report on Application Security reveals software that is vulnerable to exploit based on an application’s Common Weakness Enumeration (CWE) density. CWE is a community-developed list of common software security weaknesses that serves as a baseline for identification, mitigation and prevention efforts.

“We found that overall, organizations are taking application security quite seriously. However, there are clear outliers to this broad finding that put companies and their customers at significant risk,” said Dr. Bill Curtis, SVP and Chief Scientist at CAST Research Labs. “Without a clear understanding of existing application security vulnerabilities, organizations are not addressing some of the biggest software risks that pose a threat to their business.”

Based on contextual software analysis, the CAST Research on Application Software Health reveals how teams can better protect against hackers or disgruntled employees who manage to penetrate network security measures. Key findings from the report include:

• CWE density is not related to application size.

• Financial Services and Telecommunications have the highest CWE densities compared to other industries.

• Applications developed using .NET have higher CWE densities and produce some of the poorest software quality overall.

• Neither source nor shore impact CWE densities across application portfolios.

• Java applications released more than six times per year have the highest CWE densities.

To download a copy of the report summary, click here.

About CAST

CAST is the world leader in software intelligence, with unique technology backed by $150 million in software analysis and measurement R&D. CAST technology helps digital leaders and doers see the truth, become software geniuses and deliver Superware™ - resilient, responsive, safe and secure software. Hundreds of companies rely on CAST to improve end-user satisfaction and time-to-market, prevent business disruption and reduce cost. Founded in 1990, CAST operates globally with offices in North America, Europe, India and China.

For more information about CAST:

Web: http://www.castsoftware.com
Blog: http://blog.castsoftware.com
Twitter: http://www.twitter.com/onquality

Contact:

Positive Marketing
Ed Stevenson/Verena Franco/Charles Parant
cast@positivemarketing.com
02036370640