Application Security, Inc. and Skybox Security Host Enterprise Data Security Session with EMA

Business Wire, Oct 31, 2006

Executive-level Event Explores Convergence of Risk Assessment with Database Vulnerability Management for Enhanced Security

NEW YORK -- Application Security, Inc. (AppSecInc) (www.appsecinc.com), the global leader in database security, today announced that it will team with Skybox Security, the leader in security risk management, and recognized industry analyst Scott Crawford of Enterprise Management Associates (EMA), for an informational session on Thursday, November 2 in Atlanta. The event is designed to educate executives on how to effectively manage enterprise security by integrating risk assessment with database vulnerability management.

With more than 95 million records compromised since the signature ChoicePoint data breach announcement in February 2005, attackers have clearly changed their target. No longer are they interested in defacing Web sites, but rather, in data they can quickly monetize. And the most efficient way to harvest large quantities of up-to-date data is from the database - one of the most business-critical information assets.

Through exploitation of these application vulnerabilities, attackers can access stores of sensitive corporate data and cause irreparable damage - to the professional integrity, image and financial success of an organization. In a recent study, EMA followed the closing stock prices of six publicly traded companies that had disclosed one or more data security breaches between February 2005 and June 2006. While many factors can influence stock price, EMA determined that within three weeks following security breach disclosure, the average price of all stocks declined by five percent. Additionally, for the four companies whose stocks could be tracked for up to a year, the average stock price did not recover to pre-disclosure levels for nearly a year.

During this informational event attendees will discover how to protect against the latest information security threats, and how the convergence of risk assessment and database vulnerability management can help companies focus on the risks that matter.

Participants will learn:

* How to prioritize database application vulnerabilities in context of their impact on business assets and policies;

* How to enhance risk analysis by adding database application level vulnerabilities - this also enables more efficient remediation planning, taking database and network configurations into consideration;

* How to consolidate and normalize the network and database application vulnerabilities of the entire environment in a single repository; and

* The value of running simulations in order to understand network and database impact.

WHAT:   Executive Informational Session: "Maximizing Data Protection
        through Proactive Risk Management - Find the Needle in the
        Haystack in Minutes"

WHO:    Ted Julian, Vice President of Marketing and Strategy,
         Application Security, Inc.
        Ed Cooper, Vice President of Marketing, Skybox Security
        Scott Crawford, Senior Analyst, Enterprise Management
         Associates

WHEN:   Thursday, November 2, 2006, 11:30 a.m. - 2:00 p.m. EST

WHERE:  Maggiano's Perimeter, 4400 Ashford Dunwoody Road, Atlanta,
        Georgia

URL:    Participation is limited. Please visit
        http://www.appsecinc.com/news/index.shtml to register for this
        event.

Earlier this year, AppSecInc announced integration of its application and database scanning technology with Skybox View's unique virtual modeling and decision support technology enabling organizations to view - for the first time - database risks in the Skybox View dashboard. Through this innovative combination, organizations can now proactively predict and protect their confidential information, ensure high availability of critical IT assets, reduce IT workload particularly in the area of addressing database vulnerabilities, and assist with communicating risk levels and mitigation steps taken to bolster compliance efforts.

About Application Security, Inc. (AppSecInc)

AppSecInc is the leading global provider of database security solutions for the enterprise with offices in North America and the UK, and a robust partner-reseller network in key markets like EMEA, Asia-Pacific, and Latin America. AppSecInc's products - the industry's only complete vulnerability management solution for the database tier - proactively secure database applications at more than 600 organizations around the world. By securing data at its source, we enable organizations to more confidently extend their business with customers, partners and suppliers while meeting regulatory compliance requirements. Our security experts, combined with our strong support team, deliver up-to-date database protection that minimizes risk and eliminates its impact on business. Please contact us at 1-866-927-7732 to learn more, or visit us on the web at www.appsecinc.com.

About Skybox Security

Skybox[R] Security, the leader in the Security Risk Management (SRM) market, pioneered the science of security risk and network policy compliance analytics. The company's award-winning software product suite, Skybox View[R], is the first decision support solution that automates the manual and ineffecient processes of risk assessment, policy compliance, remediation planning as well as change assurance. With Skybox View organizations can proactively and continuously predict and protect their confidential information, ensure high availability and integrity of critical IT assets, measure progress and reduce IT workload. For more information contact (408) 441-8060 or www.skyboxsecurity.com.