Home
Managing application risk
Follow this workflow to manage application security risks in your organization.
Step 2: Testing applications for vulnerabilities
Learn how to test vulnerabilities identified in an application.
Scenarios for creating scans
These scenarios are targeted at developers and the security team. Choose the user role that most closely matches your situation.
Developers
The developer team creates scan templates using different methods and user interfaces in AppScan.
Creating a scan from a template
Depending on the method your security team uses to create a scan template, you might use the AppScan Dynamic Analysis Client or the AppScan Enterprise user interface to create your scans. These topics describe each task you might need.
Creating a scan based on a template using AppScan Enterprise scan properties
A QuickScan crawls your site to discover its content using parameters set in a scan template created by an Administrator. After it is collected by the scan, the data is stored in a database for analysis by the reporting engine and made available to you through report packs, which are collections of reports. Most of your data analysis tasks will focus on the data provided in these reports.
Reclassifying QuickScan URLs
While you explore your application, QuickScan records the URLs and uses heuristics to classify them as either part of the login sequence or as regular URLs. Any pages you navigate before logging in to the application will be classified as part of the login sequence. Pages following the login sequence are classified as regular URLs. You can reclassify any URL if it is listed incorrectly. You can see all the URLs in the list by expanding or collapsing the list.

Reclassifying QuickScan URLs

While you explore your application, QuickScan records the URLs and uses heuristics to classify them as either part of the login sequence or as regular URLs. Any pages you navigate before logging in to the application will be classified as part of the login sequence. Pages following the login sequence are classified as regular URLs. You can reclassify any URL if it is listed incorrectly. You can see all the URLs in the list by expanding or collapsing the list.

Procedure

In the Setup tab of the QuickScan, do one of the following:
1. Click the Login Steps button to move the line up the list.
2. Click the Explore button to move the line down the list.
Click Save.

Example

If a URL appears in the wrong list:

Select the URL and delete it.
Do one of the following:
- Click Explore URLs to add regular URLs to the list.
- Click Record Login to rerecord the login sequence.
Click Save.