Application attributes
Application attributes are the properties of the application, and appear as column headers in Applications view.
You can:
- Filter the application list by attributes to focus on what you want to investigate.
- Edit attributes of an application.
Attribute | Description |
---|---|
Name | Use a unique name. |
Business impact | Indicates how critical this application is to your business. User controlled. |
Business unit | Optional. Business units can be a useful way of grouping applications
according to your organizational structure. For example: "Marketing", "R&D",
"Sales", "Support" and so on. Knowing the business unit can help you to identify areas
of concern.
Note: An application can belong to only one business
unit. To change the business unit of an application, select Manage > Edit application. Administrators only can create and manage business units in Organization > Settings. |
Asset group | Identifies the asset group the application belongs to. Administrators can restrict access to specific applications by assigning them to an asset group and limiting the users who belong in the group. |
Testing status | Indicates Not Started or In Progress in this field. This attribute
appears as a summary chart and can also be filtered in the application grid.
|
Risk rating | Risk rating indicates the aggregated business risk for this application. It is based on two factors: the highest severity level of the Open Issues in the application, and the Business Impact as defined by the user. There are four levels: Low, Medium, High, Critical. If there are no open issues, or if Business Impact is Unspecified, risk rating is Unknown. |
Critical/High/Medium/Low issues | The total number of issues with this severity in the application. These numbers are updated whenever issues are managed or a scan is run. |
Issues in progress | The aggregated numbers of issues that are currently being fixed for each application (that is, Status = In progress). These numbers are updated whenever the issue status is updated. |
Description | Further identifies the application for other users to understand its significance. |
Last updated | This field is updated only when a user updates a value for an application
attribute. The following events do not trigger the field to update:
|
New/Open/Fixed/Total issues |
|
Type | Use this attribute to indicate whether this application is run or viewed on the web, mobile, or desktop. You might also indicate All if the application can be viewed on all types of devices. |
URL | The unique URL of the web application. |
Hosts | The IP address or server name where the application is hosted. If necessary, enter multiple values, and separate them by commas. |
Business owner | Indicates who owns responsibility overall for the successful implementation and delivery of the application. |
Development contact | Indicates the developer or the team lead responsible for this application. |
Tester | Indicates the focal point for security testing of this application. |
Collateral damage potential | The potential for damage or theft if the application is vulnerable. (CVSS Environmental metric) |
Target distribution | The proportion of systems in the environment that are potential targets. (CVSS Environmental metric) |
Availability requirement | The relative importance of availability of information. (CVSS Environmental metric) |
Confidentiality requirement | The relative importance of confidentiality of user information. (CVSS Environmental metric) |
Integrity requirement | The relative importance of integrity, or accuracy, of information. (CVSS Environmental metric) |