Virtual World of Containers, VMs Creates New Security Challenges

Containers, virtual machines, and the advent of DevOps as a software creation tool all put new pressures on organizations’ security strength, according to Dan Hubbard, CEO of Lacework. Cloud’s ability to offer scale, capacity, and processing power may even exacerbate the vulnerabilities unless properly managed, he adds.

from Dark Reading: https://ift.tt/2Nu24Az
via IFTTT

Spirent Nixes Over-Reliance on Compliance Checklists for Good Security

Enterprises must regularly validate their security efficacy based on real-time conditions, not compliance criteria, says John Weinschenk, General manager, Enterprise Network and Application Security of Spirent. That sort of testing returns actionable data to tune devices, update policies, and fortify defenses before they are compromised, he adds.

from Dark Reading: https://ift.tt/2TUFsdK
via IFTTT

App Security Still Dogs Developers, End-User Organizations

Lots of re-used code, cost pressures and long lead times for application software all lead to porous security where application software is concerned, says Chris Eng, Chief Research Officer for Veracode. But an emerging role he calls a “security champion” can help circumvent those problems and make apps safer for everyone.

from Dark Reading: https://ift.tt/2MzLLm9
via IFTTT