WhiteSource Raises $35M to Mainstream Open Source Security Management
Accelerated revenue growth, tripling YoY, underscores rapid market adoption of automated Open Source management TEL AVIV, Israel, Oct. 17, 2018 /PRNewswire/ — WhiteSource, the leader in continuous open source security management, announced a $35 million funding round led by Susquehanna Growth Equity, with participation by existing investors 83North and M12 – Microsoft Ventures. This $35 […]
DevOps Chat: disrupt:Ops Brings Security Closer to DevOps
Shifting security left during the software development process can be tough for companies because of the sheer number of operational things that go along with implementing security that must occur somehow in the realm of DevOps. It can be easy to lose control over their security processes without some sort of guardrails in place to […]
Integrating DevOps: Avoid These Common Mistakes
DevOps, as the name implies, is a combination of two professional teams—software development and the IT experts. Both the teams collaborate well with the aim of creating a bridge that accelerates and automates the process of software development and a more intensive testing before releasing it into the market with high confidence. DevOps has been […]
Trend Micro Redefines Endpoint Security with Trend Micro Apex One™
All-in-one advanced endpoint security solution automates detection & response, delivers insight for stretched IT and security teams DALLAS, October 15, 2018 – Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today launched the evolution of its advanced endpoint security offering. Now re-branded as Trend Micro Apex One™, the product redefines endpoint security with the sheer breadth […]
DevOps Chat: The New Security Breed with Veracode’s Mark Curphey
DevSecOps has changed the way developers approach security in their application development cycle. But it’s also been the source of confusion, as some developers grapple with understanding how DevSecOps is different from application security. Mark Curphey, VP of strategy at CA Veracode, is clued in to the differences, which he discusses in this DevOps Chat. […]
Database Security: Best Practices for Keeping Data Safe
Database security is of utmost importance to sectors including IT, banking, finance and ecommerce. Every other transaction is based on how secure their database is, as it holds every detail including usernames, passwords, customers’ credit card information and so on. The term “database security” denotes a series of measures initiated by the service provider to […]
DevOps Chat: Container Security and More with StackRox’s Ali Golshan
Security has many faces, which is why it’s so difficult to implement effectively. Each environment is different; each security solution is different; the needs of each organization is different. That’s why, as Ali Golshan, StackRox founder and CEO Ali Golshan put it, security has gotten a bad rap. Golshan and his company are approaching security […]
The Hybrid Cloud and Why DevOps Teams Need Unified Stack Observability
The modern data center is constantly evolving to keep up with the demands of always-on, anywhere computing. Long gone are the days of monolithic, on-premises data centers. Today, the computing modus operandi is that of the hybrid cloud, which, according to Statista, will be worth close to $50 billion in 2018—just about double what it […]
DevOps Chat: Open Source and DevSecOps with Azi Cohen, WhiteSource
The security of open source code is one many organizations are grappling with. Add to that the number of times that applications using open source code are updated and the integration issues that come with those updates, and it’s no wonder open source security comes into question. WhiteSource thinks it has a solution to the […]
DevSecOps: Critical in Building the Bank of the Future
It is no secret that change in a large organization can be difficult. This is often true within banking, an industry that often has sought predictably instead of agility in software delivery. However, with the right tools, guidance and teams, creating a bank that can be both complaint and responsive may be more attainable than […]
DevOps and the Dark Pools of Security Technical Debt
We live in a world of digital transformation where organizations across industries are embracing initiatives around automation, cloud deployments and containerization of applications—and for good reason. Enabling transformative technologies such as DevOps, for example, can deliver superior product differentiation, faster time to market for new applications and services and an improved overall customer experience. A […]
DevOps Chat: DevSecOps with ShiftLeft CTO Chetan Conikee
Security in the DevOps process has gotten a lot of attention lately, as companies grapple with ways to include security further up the application development process. The industry is still very much a nascent space, as players remain engaged in the security-versus-speed conversation—one always is sacrificed for the other. ShiftLeft, however, doesn’t believe that’s the […]
WhiteHat Security Looks to AI to Advance DevSecOps
WhiteHat Security is now embedding artificial intelligence (AI) into the application security review services it provides, as part of an effort to advance adoption of DevSecOps processes. Joseph Feiman, chief strategy officer for WhiteHat Security, said the biggest resistance factor to DevSecOps has been the amount of time it takes to test applications for vulnerabilities. […]
DevSecOps: Where DevOps and Security Meet
Catching up with three IT leaders on the role of security in the changing world of DevOps The DevOps methodology as a software and engineering culture goes back nearly 10 years—Patrick Debois coined the term when he named a Belgian software conference “devopsdays.” Since then, the movement has taken on a mind of its own, […]
Defend Against Phishing Attacks with EV Certificates
One of the most important elements of fishing is choosing the right lure or bait. The same is true when it comes to the malicious digital version—phishing. A phishing attack requires good bait to be effective. Organizations can defend against phishing attacks and help protect customers by using EV certificates to verify the authenticity of […]
VMware Extends DevOps Reach via SaaS Apps
VMware, at the VMworld 2018 conference today, announced it will be delving deeper in the realm of DevOps with the launch of a continuous delivery pipeline dubbed Code Stream. In addition, VMware announced Cloud Assembly, a set of declarative tools that enable IT organizations to spin up a cloud in as little as 10 minutes […]
Implementing DevSecOps in the Mainframe-Driven Enterprise
DevSecOps is emerging as an important trend in corporate IT. It makes sense. With each passing day more applications serve a larger user base. Whereas in the past the typical business application was accessible only from within the confines of an enterprise’s internal network, today, the software-as-a-service (SaaS) paradigm enables millions of users work with […]
Threat Modeling: The Why, How, When and Which Tools
You may have heard of threat modeling as a structured activity for identifying and managing threats. Threat modeling can be applied to a wide range of things, including software, applications, systems, networks, IOTs and business processes. Threat modeling’s motto should be, “The earlier the better, but not too late and never ignore.” Without threat modeling, […]
DevOps Security: 3 Privileged Access Management Best Practices
The tremendous upside of DevOps practices and tools are enough to keep organizations pressing forward at all costs. But when sloppy use of DevOps toolchains cause breaches, more than half the time it comes down to poor protection of privileged accounts. According to a recent study by security vendor Beyond Trust, 52 percent of IT […]
When It Comes to Mainframe Computing, There’s More to Containers Than Containers
When people in the DevOps world hear the word “containers,” most of the time they imagine the lightweight, standalone, executable Docker binaries that have become commonplace in today’s cloud infrastructure. It might come as a surprise, however, that the world of mainframe computing not only supports traditional Docker containers, but also expands the concepts of […]
Speed and Security Can Coexist in Mainframe DevOps
DevOps teams face a constant tug-of-war in their daily work, balancing the need for speedy rollouts of high-performing (fast, reliable) applications that are secure also. If the team moves too quickly, an overlooked security vulnerability may make its way into production. If the team is not nimble enough to identify those security gaps, it can […]
Connectivity as Code: Making Network Security DevOps-Friendly
DevOps is all about agility, with fast, short delivery cycles and automation for software development and applications. Enabled by recently introduced technologies such as virtualization, cloud and software-defined networking (SDN), spinning up new servers, provisioning storage in a public or private cloud or even launching whole environments can take just minutes or even seconds. But […]
DevOps: Making the Development Cycle More Secure
The promise of secure DevOps can be realized through security technologies such as dynamic authorization Fundamentally, DevOps is all about speed and agility. Customers expect companies to deliver and update applications at an accelerated pace and businesses must adopt modern technologies to meet customer expectations. With DevOps, organizations can implement a continuous development and deployment […]