<?xml version="1.0" encoding="UTF-8"?>
<org.eclipse.epf.uma:ContentDescription xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:org.eclipse.epf.uma="http://www.eclipse.org/epf/uma/1.0.6/uma.ecore" xmlns:epf="http://www.eclipse.org/epf" epf:version="1.5.1" xmlns:rmc="http://www.ibm.com/rmc" rmc:version="7.5.1" xmi:id="-DTVJ1sHb-iTjxwH-vhZ5qg" name="new_report,_k0Yk0ESQEd2HGqVSmFS1Dw" guid="-DTVJ1sHb-iTjxwH-vhZ5qg" changeDate="2008-06-27T14:33:46.921-0700" version="7.5.0">
  <mainDescription>&lt;p>&#xD;
    This report consists of the following sections:&#xD;
&lt;/p>&#xD;
&lt;ul>&#xD;
    &lt;li>&#xD;
        &lt;b>Introduction and Objectives:&lt;/b> General information about the scan, including the project name, purpose of the&#xD;
        scan, and.&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        &lt;b>Executive Summary:&lt;/b> A high-level view of the information gathered during the scan, usually using graphs or&#xD;
        comparative numbers. This section is meant to provide a general understanding of the security status of the&#xD;
        application.&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        &lt;b>Detailed Summary:&lt;/b> A detailed listing of the scan results, including all issue types found, all remediation&#xD;
        tasks recommended, all vulnerable URLs, and so on. This section is meant to provide a more detailed understanding&#xD;
        of the security status of the application, as well as assist in scoping and prioritizing the work required to&#xD;
        remedy the issues found.&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        &lt;b>Detailed Vulnerability Information:&lt;/b> For each issue, this section includes all relevant details, including a&#xD;
        detailed security advisory, and all variants, affected URLs, and fix recommendations. This section is used both to&#xD;
        educate on the nature and impact of the different issues, and to guide their remediation.&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        &lt;b>Application Information:&lt;/b> Details that AppScan revealed about the application, such as pages discovered,&#xD;
        script parameters tested, and so on. This section is used to understand the extent of coverage of the scan, as only&#xD;
        those areas detailed in the application data have been tested.&#xD;
    &lt;/li>&#xD;
&lt;/ul>&#xD;
&lt;p>&#xD;
    See the attached file for more details: &lt;a href=&quot;./resources/sec_issues_by_type_sample.doc&quot;&#xD;
    target=&quot;_blank&quot;>sec_issues_by_type_sample.doc&lt;/a>.&#xD;
&lt;/p></mainDescription>
</org.eclipse.epf.uma:ContentDescription>
