10315190018__Acunetix_Security_Tool.docx

Brand Name Justification Acunetix Security Tool

Request Description:

This paper will cover the brand name justification for “Acunetix Security tool” license process. A total of 1 license is required.

Description of Product Acunetix is a tool used by cyber security analysts. This specialized tool allows security analysts to identify vulnerabilities in software code. This tool will easily integrate with development tools such as Visual Studio Ultimate and SQL Server.

Main Justification The requested licensing for Acunetix will be used in the design, creation and maintenance of applications at FSI. These applications are located both on the development network as well as in production network. Acunetix is the only solution that will work with the existing products currently in use at FSI. Additionally, as with most vendors, the Acunetix product is a proprietary application. Any other brand product would not be compatible with this existing installation.

This item is on the FSI’s Information Technology Change Control Board list as is required per the Bureau of Information Resource Management titled configuration management. This listing outlines categories, models, as well as, specific brand names of products authorized to be used within the Department of State’s infrastructure. Items not on this list are not approved for use within, regardless of similar functionality.

Market Research conducted A market research was completed in order to identify tools currently available and used on the private as well as the government sectors that would be able to complete similar task as the Acunetix tool. Applications such as WebInspect and Nessus which are considered similar tools finally do not provide the same level of functionality and more important the level of compatibility that the Acunetix tool can provide. Among other items WebInspect and Nessus do not have the necessary features to identify vulnerabilities in mobile applications. Our current list of project plans includes a mobile application suite that will be deployed this coming fall (2015).

Summary Due to features that Acunetix can only provide to FSI’s security analysts, as well as the compatibility which this software can provide to current projects, databases and code created, it’s highly recommended to purchase the Acunetix tool. In case of Acunetix not being purchased, hundreds of design and development hours will be needed to accommodate a different application.