Want to make auditing easier? The ESP University now has a digital/self-paced training to get you started using Audit Assistant (AA) through the Fortify SSC (Software Security Center). It’s not too late--get a discount on this training if you register for Protect 2017! Fortify Scan Analytics platform
Audit Assistant is for those organizations that spend too many hours auditing before the results are actionable. Through the Fortify scan analytics platform, this actionable intelligence problem is improved. Did you know Fortify has been deploying and validating this approach with Fortify on Demand (FoD) for over a year with enormous improvement to the issue auditing process? Now, this capability is available to on-premises customers of the Fortify Software Security Center (SSC) via its audit assistant feature.
Audit assistant identifies relevant exploitable vulnerabilities specific to your organization, in new static scan results. It does this by employing scan analytics machine-learning classifiers that are trained using anonymous metadata from scan results, previously audited by software security experts. The scan analytics platform delivers this capability as a web service in the cloud, enriching SCA scan results with audit predictions.Audit Assistant predictions in the SSC
Through our ESP University and Protect 2017 you can sign up for the Fortify Audit Assistant training. At the end of this course, you will be able to reduce the auditing time for your applications. You will be taught to define classifiers and prediction policies from the Fortify Scan Analytics tenant, utilize the community intelligence metadata, and then configure your SSC for AA predictions to identify issues relevant to your organization’s security standards and reduce your auditing time.