Delta Analysis reports

The Delta Analysis report compares two sets of scan results and shows the difference in URLs and/or security issues that were discovered in them.

About this task


Delta analysis report icon

You select Base and Target scans, and AppScan® compares the two sets of results to let you review how the security situation has improved or deteriorated between time of the two scans.

You can compare the currently loaded scan with a saved scan, or you can compare two saved scans.

When comparing scans you will generally use the earlier scan as the Base scan. The Delta Analysis report will then indicate how the Target scan results differ from those of the Base scan.

Delta Analysis reports include the following sections:

Section Title

Information Presented

General Information

Lists the names and locations of the Base and Target scans.

Description

Description of the information included in the scan.

Issues per Host

Table showing the number of High, Medium, Low, Informational and Total issues found in each scan.

Application URLs

(If included) Bar chart showing number of New/Removed/Remaining URLs, followed by a full list of each type.

Security Issues

(If included) Bar chart of New/Fixed/Remaining Security Issues, followed by a bar chart showing the distribution of Severities in both scans (High/Medium/Low/Informational), followed by a full listing of all New/Fixed/Remaining issues.

The figure below shows a sample from a Delta Analysis Report.



Procedure

  1. Click Tools > Report > Delta Analysis
  2. Select the Base scan (usually the earlier of the two scans being compared). In the Base Scan area, do one of the following:
    • Click the Current® Scan radio button
    • Click the Saved Scan radio button, and then browse to the location of the saved scan file.
  3. Select the Target scan (usually the later of the two scans being compared). In the Target Scan area, do one of the following:
    • Click the Current Scan radio button
    • Click the Saved Scan radio button, and then browse to the location of the saved scan file.
  4. In the Report Content area select one or both of the check boxes for the type of information you want the report to compare:
    • Application URLs, and/or
    • Security Issues
  5. If you want to control the appearance of the report, open the Layout tab (see Configuring report layout).
  6. Click Preview to generate and view the report within AppScan; or click Save Report to generate and save it to a file.