The Science of Compliance: Early Code to Secure Your Node
This is a summary of Judy Johnson’s talk “The Science of Compliance: Early Code to Secure Your Node”. Watch the entire presentation below. We’re here to talk about the science of compliance ...
Continuous Contextual Authentication: Cybersecurity and Identity Converge in a Hybrid-cloud World
Authentication and authorization are broken. As an industry we’ve known this for a long time and the notion routinely emerges as “death of the password.” One might blame it on the definitions ...
Dev + Sec + Ops != DevSecOps
Dev + Sec + Ops ! = DevSecOpsDevSecOps formulaHistorically, security vendors and code scientists around the world have been looking for a single universal formula to represent the notion of DevSecOps.In my ...
The Challenge of Managing Identities in a Cloud-y IT Environment
In the era of DevOps, organizations must ensure their identity assurance strategy is ready to keep pace with the demands of cloud infrastructure ...
Making Everyone Visible in Tech
Jaclyn Damiano, Director of Digital Operations at a large telecommunications firm, talks with Sonatype's Justin Miller about raising the visibility of diversity within teams. Her research shows that there is still a ...
Incident Response Requires a New AppSec Model
Incident response found its way into our technological vernacular back in 1988 when the first internet worm—dubbed “The Morris Worm”—was released. In response, the Computer Emergency Response Team/ Coordination Center (CERT/CC) by ...
How to transition from DevOps to DevSecOps?
When does a DevOps team or a person become DevSecOps? Is it after they start using one or two security tools as part of their workflow? Or is it after they hire ...
Emerging from the Tool Swamp to a Unified AppSec Platform
Traditional approaches to application security (AppSec) rely on a patchwork of disconnected tools and processes that add high levels of friction to the modern software development life cycle (SDLC). A unified AppSec ...
Announcing ShiftLeft Scan — An integrated scanner for modern DevOps
Announcing ShiftLeft Scan — An integrated scanner for modern DevOpsIt gives us great pleasure to announce Scan — a free and open-source security product from the ShiftLeft Incubator. Scan is built specifically for the needs of ...
Security Considerations for a Blended Workforce
A blended workforce consisting of external organizations, traditional workers and non-traditional workers such as freelancers, remote workers, temporary workers and independent contractors (ICs) can provide an organization with the added potential for ...
