Automating Security with Palo Alto
Today, automation is more important than ever before. Integrating security and automation early into the SDLC decreases the risk of potential cyberattacks, provides early and relevant feedback, reduces time to market and improves product quality. In this TechStrong TV episode, Taylor Smith, senior product marketing manager with Prisma Cloud, Palo Alto Networks, discussed the need […]
Adapting Security with Menlo Security
Cloud data security is top of mind for CISOs. User data is moving across clouds, platforms and applications, and if we don’t shift to a data-centric approach, we won’t be able to protect that data. Jack Miller, head of professional services at Menlo Security and former CISO of over 16 years, addresses the balance of […]
Managing Cloud Security with Check Point Software
Managing cloud security across multiple cloud providers, private cloud, AppSec and software as infrastructure, is highly complex. In this TechStrong TV episode, TJ Gonen, head of cloud security product line at Check Point Software, advises a security strategy that meets the challenges of cloud environments and cloud-native software architectures, and DevOps toolchains. Information about Check […]
Data Needs and Challenges with CData
The data businesses and applications need are everywhere and access through a multitude of technical interfaces, including APIs, database queries, data layers like ODBC, cloud services and SaaS applications (to name a few). In this episode of TechStrong TV, Jerod Johnson, technical evangelist at CData, joins Mitch Ashley to discuss the challenges of meeting the […]
DevOps Chat: Maximizing the Benefits of DevSecOps
When discussing security in DevOps, we often focus on the security tools instead of the DevSecOps process itself. In this DevOps Chat, ZeroNorth CEO John Worrall takes us to the root of “why” DevSecOps, focusing on the business benefit, gain and measurement of what we seek to accomplish through DevSecOps. John advocates we concentrate on […]
Web Isolation and Secure Web Gateways with Menlo Security
Since the COVID-19 outbreak, many enterprises have implemented remote work policies to monitor network traffic and protect sensitive data. Organizations have been adjusting and adopting new practices and technologies to improve data security across cloud-based environments. In this episode of TechStrong TV, Nick Edwards, vice president of product management at Menlo Security, joins Mitch Ashley […]
How to Use the Assessment of DevOps Capabilities (ADOC)
The Assessment of DevOps Capabilities (ADOC) is crowdsourced, vendor-neutral and designed for individuals, teams and organizations who want to baseline their current DevOps state, identify the next target state, gain insights into how to improve their organization and team capabilities and measure and accelerate continuous improvement during their DevOps journey. The assessment models five DevOps […]
Application Security and Continuous Observability with DeepFactor
Today’s modern applications are becoming increasingly complex and released more frequently than ever before, therefore increasing security, privacy and compliance risks. How do you identify the security and compliance risks hidden in your application before you deploy it to production? Continuous observability enables DevSecOps teams to observe millions of application telemetry events and find runtime […]
Open Source and the Mainframe with Rocket Software
Open source enables developers to quickly create and deploy containers and business services across public and private infrastructures. Open source tools allow DevOps teams to harness the power of the mainframe. In this TechStrong TV interview, Tim Willging, chief architect and strategist, and Peter Fandel, mainframe open source evangelist at Rocket Software, join Mitch Ashley […]
TechStrong TV: How to Build and Refine Your DevOps Skills with OpsCompass
The role of DevOps is constantly evolving as new technologies and trends keep emerging and reshaping the business. It is critical for DevOps engineers to continuously learn about the latest tools, best practices and technology, and be able to adapt to change. There are many ways for DevOps teams to refine their skills in order […]
The Use of Open Source in Mainframe Environments
Open source is a critical element of IT computing. As companies modernize the mainframe and start to add components to mainframe applications that are off the mainframe, they should to be able to build, test and deploy the components of that application that go across the mainframe and different computing platforms in the same manner. […]
Managing Data Risk in 2021
You can’t protect your data if you don’t know where it is stored. The first thing to consider when creating a risk-based approach to data protection is the ability to identify and prioritize data, and control who has access to it. But, how do we do this? How do we prioritize data? In this TechStrong […]
What is SAST? Overview + SAST Tools
Static Application Security Testing Overview With the growing number of cybersecurity threats, you must ensure that your software is protected against potential vulnerabilities and threats. One of the most beneficial practices is to use static application security testing (SAST). What You Need to Know Static application security testing is a type of software test used […]
Top 10 Common Software Vulnerabilities
An essential part of an effective software security process is being familiar with software vulnerabilities, which are flaws or weaknesses in your code. Often, testing and manual code reviews are unable to identify every single vulnerability, which can impact the performance and security of your software. For that reason, it is important to have a […]
What Is ISO 21434? Compliance Tips for Automotive Software Developers
What Is ISO 21434? Compliance Tips for Automotive Software Developers To read more, please visit: https://www.perforce.com/blog/qac/ISO-21434-Compliance Mitch Ashley
Top 10 Embedded Security Vulnerabilities
Nearly all of detected security vulnerabilities can be attributed to just 10 types. Here, we discuss the most common cybersecurity vulnerabilities and offer guidance on how to mitigate their risk. Vulnerability 10: Numeric Errors Numeric errors can refer to several different categories of problems, including wrap around errors, improper validation of array index, integer overflow, […]
5 Ways to Accelerate Standards Compliance With Static Code Analysis
In mission- and safety-critical industries, static code analysis is essential to facilitating the development of robust and reliable software. However, according to VDC Research, a B2B technology market intelligence and consulting firm, only 27% of embedded developers report using static code analysis tools. This raises an important question: Why is the adoption rate for static […]
Best Practices for a Secure Software Development Project
The beginning of any new software development project can be daunting, as there are many decisions that need to be made and considerations that must be thought through. Often this includes defining project requirements, selecting the right processes, choosing the right tools and ensuring software security. In this webinar, we will walk you through the […]
What Is PA-DSS?
If you develop payment application software, you must ensure that it is secure and compliant with PA DSS. Read on to learn more about the payment application security standard. What You Need to Know About PA DSS The Payment Application Data Security Standard (PA DSS) is a part of PCI DSS and is a global […]
What Is OWASP?
With cybersecurity attacks rising, it is important for you to enforce secure software best practices, like OWASP and the OWASP Top 10. OWASP helps you to safeguard your code against software security vulnerabilities. Continue reading to learn why OWASP is important. What You Need to Know About OWASP The Open Web Application Security Project (OWASP) […]
What is the NIST Cybersecurity Framework?
Cybersecurity threats are easier to handle when you have a framework to build off of. That’s why NIST developed the Cybersecurity Framework. Learn more. What You Need to Know About the NIST Cybersecurity Framework The National Institute of Standards and Technology, or NIST, helps organizations to better understand and manage their cybersecurity risks. NIST does […]
Klocwork Is the Ideal Static Analysis Tool for DevOps
Klocwork identifies software security, quality and reliability issues for C, C++, C# and Java helps to enforce compliance with standards. Its in-depth, accurate and precise analysis results have earned Klocwork the trust of industry leaders across a variety of industries. However, Klocwork is more than just a static code analysis tool; it’s also a static […]