1 Results
R&S®Trusted Application Factory - Product brochure
Modern teams are going cloud native by moving to microservices based architecture. With the usage of microservices, east-west traffic is growing too. It is critical to secure this lateral traffic to reduce available attack surface in internal systems. Moreover, attacks highlighted in OWASP Top 10 are still relevant for cloud native applications. In addition, some underrated attacks like credential stuffing also need to be taken into account. Integrating a security solution into your CI / CD toolchain involves human resource costs. Many companies rely on powerful tools like SAST, DAST and SCA. However, these tools partially cover the OWASP Top 10 and do not ask for precise information from developers to describe an application / API easily. SAST gives rise to many false positives and cannot determine new runtime vulnerabilities. DAST and SCA help spot many vulnerabilities but it can be a nightmare for companies to handle them all. Hence, these security testing tools are not sufficient anymore to ensure the security of your applications, especially against zero-day attacks.