:::: MENU ::::

Posts Tagged / HP

  • Mar 23 / 2009
  • 2
Web 2.0, Web Security

HP SWFScan – FREE Flash Security Tool


Today we have released a FREE flash security tool, SWFScan (Pronounced “Swiff Scan”), that will help developers find, fix and prevent security vulnerabilities in applications developed on the Adobe Flash platform.  In the last few years, especially with the release of Adobe Flex (ActionScript 3), we have seen an explosion of web sites built on or containing Adobe Flash components. (Opera Developer Center Study in October 2008 found 30-40% of web sites contained Flash)  However, like with the explosion of any technology, there is also an explosion in discovery of ways that the technology has been exploited by hackers, too often developers building applications on the Adobe Flash platform leave unintended security vulnerabilities in their code. (eg.  Hard coding passwords and encryption keys into their applications)

Here’s a quick video of Billy Hoffman talking of a specific example called Billy ‘Wins’ a Cheesburger:

During the research and development of HP SWFScan, the HP Web Security Research Group tested about 4,000 SWF files and found the following issues to be the most alarming:

  • 16% of Flash applications using Flash 8 and below have XSS vulnerabilities
  • 77% of Flash 9 and 10 applications contain developer debugging information and source code file references
  • 35% of all Flash applications violate Adobe’s security best practices

So…How does it work?

HP SWFScan takes an application developed on the Adobe Flash Platform and decompiles it revealing the ActionScript source code.  The tool then takes the ActionScript and performs static analysis to understand the applications behaviors. SWFScan will then identify the vulnerabilities that lie under the surface of the application which are not detectable with traditional dynamic methods.  (It is also the first security tool to address both ActionScript 2 & 3)

It not only identifies the vulnerability within the code, but also describes how it can be exploited as well as suggested ways of remediating (Including Adobe’s Best Practices)

HP SWFScan can analyze any SWF file regardless of the version of Flash or ActionScript, and no matter whether it is located on your local computer or available via a URL.

The HP Web Security Research Group have developed HP SWFScan in the name of helping our customers and developers around the world make the web a safer place.

Download a FREE copy here: www.hp.com/go/swfscan



  • Jun 14 / 2008
  • 0
Travel, Web Security

Moving to Silicon Valley

I recently accepted a new position at HP that will see me departing Sydney in August to take up residence in California. I am now the Global Product Marketing Manager for HP Application Security Center.  In a way it will be sad saying goodbye to many good friends in Sydney and not visiting the great countries of Asia as much but for me this is one of my dreams to go and work in the hub of all great things technological.

Off to Vegas (Again!!) for HP Software Universe………….

  • May 05 / 2008
  • 0
Random Thoughts, Travel

People you sit next to on Planes, Garages and Bill Hewlett

There is something about sitting on a plane that makes me want to write. Why? I have never been a writer. I’m a speaker! I prefer to speak if I have a thought. Is it because I always sit next to people who look like they would kill me if I spoke to them? Brings up the question as to why everyone always looks so sad on a plane and never smile? Is flying that bad? Doesn’t flying lead to exciting destinations and adventures? I can’t remember the last time I spoke to the person next to me after takeoff. I think stem from the fact that sitting around for extended hours saying nothing means I have to get my thoughts out somehow. (Otherwise I could explode!)

So what are my thoughts today…..I am about halfway to Singapore on SQ220 (No A380 this time….saving that for Thursday coming home) and I am thinking about the people you end up sitting next to on the plane. Why don’t I ever get sat next to an interesting person? Back in my single days I always dreamed of the woman of my dreams sitting next to me (Didn’t we all!). I can see why that never happened. I.e. If Stace had sat next to me on a plane and had to listen to me for 8 hours express my ‘deep aero plane’ thoughts, there is a good chance she would never have married me! Thank you God! I digress.

I believe these thoughts have stemmed from my jealously of the ‘Garage’ Man. Who’s the ‘Garage’ Man? This week I am further investing in property, a garage! Very exciting. The ‘Garage’ Man is the man I am buying the garage off. Pretty Tricky! So, when I met up with him the other day to discuss contracts, the topic of who I worked for came up. When I told him I worked for HP, ‘Garage’ Man broke into a story from 30 years ago. This wasn’t just another old man telling another war story, however it probably would have seemed like that if you weren’t me.

In 1978 ‘Garage’ Man sat next to Bill Hewlett (Co-Founder and President of Hewlett-Packard) on an TWA flight from New York City to San Francisco. In the 7.5 hour flight (Planes were slower then) Bill went on to describe this technology company he started in a garage in Palo Alto in the heart of Silicon Valley with a friend. ‘Garage’ Man listened to early growth and direction of HP. The passion and vision of two men. Amongst other things Mr. Hewlett spoke of his love of technology rather than business. This was evident when he stepped down a few years later from being President to run the R&D labs. The following day Mr. Hewlett sent a car to ‘Garage’ Man’s hotel to pick him up and take him to HP’s Palo Alto HQ for a personal tour by Bill and Dave (Packard). This experience shaped many decisions he made in life.

Bill Hewlett started the World’s largest Technology company in a garage, ‘Garage’ Man sat next to Bill Hewlett on a Plane (And they spoke!), I bought a garage from ‘Garage’ Man. What does the future hold for me? Probably nothing if I look at life this way! However, I long for the day I sit next to someone life changing on a plane. Maybe a Steve Ballmer, a Steve Jobs, a Sergey Brin or a Larry Page? I doubt it though…….They all have their own Jets!

(Further Note: This was some irony in ‘Garage’ Man’s stories. Dave Packard was sitting in the row in front. Bill and Dave always sat next to each other on the plane but TWA had mucked up. Here’s the irony, Bill and Dave were 2 of TWA’s Directors! Bill was going to see personally that TWA never let this happen again)

Sorry for wasting 4 mins of your life. It saved me exploding.