Lucent Sky AVM 4 released
January 09, 2017
Lucent Sky AVM 4 is the first major release of 2017, bringing a new mitigation engine with enhanced coverage and accuracy. Also included is support for three new technology stacks - C/C++, Swift and Active Server Pages.
Updates in Lucent Sky AVM 4 include:
- 3rd generation mitigation engine - this new mitigation engine has been available to preview customers for the past 7 months, and their feedback has allowed us to fine-tune the remediation algorithms to better suit the applications used by our customers. Starting with v4.0, the "mitigation,preview" scan argument is no longer required as the 3rd generation mitigation engine is now the default mitigation engine. However, if you want to force a scan with the previous mitigation engine, you can use the scan argument "mitigation,legacy" (a preview license is not required).
- Support for C and C++ - Support for C and C++ applications has been added, as well as identification capability for relevant vulnerabilities such as buffer overflow and memory leak. Remediation capability for some of these vulnerabilities will be added at later releases.
- Support for Swift - iOS applications developed using Swift are now supported, and vulnerabilities like those found in Objective-C iOS apps are supported. When scanning an iOS application, Lucent Sky AVM will automatically detect its language (Objective-C or Swift).
- Support for Active Server Page - Support for Active Server Pages (ASP, not to be confused with ASP.NET) applications has been added, and common web vulnerabilities such as cross-site scripting, SQL injection and open redirect can be identified. Support for additional vulnerability categories and remediation capability will be added at later releases.
If you are using Lucent Sky AVM Enterprise, Standard or Test Edition (either on-premise or cloud) and have an active subscription or maintenance agreement, you can update to Lucent Sky AVM 4 immediately. Our support team will reach out to you shortly to schedule an update. If you are using Lucent Sky AVM On-Demand, your server will be updated to Lucent Sky AVM 4 in the next few days.