Application Security

You can run a variety of spyware tools that check the suspicious behaviour of applications. Some of these tools are installed when you install Visual C++. This however, does not gaurantee all the security vulnerabilities of the application are discovered. You can consider a code review. QA or peers (other than the developers) can review the code.

There also development frameworks that when followed not only give a good architectural design but also a secure and reliable application. These include secured COM and DCOM.

Usually the custom designed applications (VB, C, Foxpro, SQl etc) do not by themselves undermine security, but its usually the environment in which they are used that is a cause of security concern. For example, your ASP applications might be running on the internet or intranet. To secure such applications you can restrict access to these applications. You can provide access codes to the legitimate users.

Your servers should have the proper security configuration. Also make sure that you install all the latest patches and service packs for your software applications and their platform.

Your current and future applications will be secure if they are developed by using a industry standard framework fordevelopment (like COM or Fusebox) and you have the latest patches installed in tandem with a well managed server and software deployment.