Check enterprise applications for static passwords

Passwords work, users accept them, IT has to deal with them. We all know that authenticating users and controlling access to application data is the logical starting point for corporate security programs. However, a persistent problem which may potentially be the bigger risk to the business are the credentials hard-coded into custom applications. 
Most of the corporate authentication effort is on identifying interactive users, especially those connecting remotely. Password management, including password change policies and mandatory password strength testing, help to keep this process rationally secure. Unattended enterprise applications, however, are another story.

Read more at ivanr

Related posts:

1. Oracle to plug 37 security holes
2. The Vicious Cycle of Passwords
3. What applications does License Statistics work with?
4. Ad-Aware SE Enterprise
5. Oracle Database will get 20 fixes
6. Detection in database system

Related posts brought to you by Yet Another Related Posts Plugin.