Reduce Alert Volume and Prioritize Remediation with Deepfactor and Black Duck - Seguridad Mania.com - España y América Latina

Engineering teams in many industries are embracing cloud-native development and rapidly adopting open source software, increasing both the frequency and complexity of software releases. The automotive industry’s shift to software-defined vehicles is a great example of retooling to leverage modern development practices while maintaining focus on reducing application risk. In order to understand and address application risk, engineering teams often use software composition analysis (SCA) to discover vulnerable libraries and dependencies. Augmenting SCA scans with dynamic, contextual analysis of the running application can prevent engineering teams from being overwhelmed with vulnerability alerts, reducing the potential impact of security on development. This is particularly true in Kubernetes, where applications utilize several languages and can be spread across dozens if not hundreds of containers and systems. Although identifying the vulnerable containers is step one, determining impact and affected code will help determine priority. To address these challenges, Deepfactor announced a partnership with Synopsys, a leader in application security testing, at KubeCon + CloudNativeCon Europe 2022. The Deepfactor Developer Security integration with Synopsys Black Duck® provides developers with access to enhanced, well-researched Black Duck Security Advisories and runtime security insights such as usage information and method tracing in a single platform, purpose-built to reduce alert volume and prioritize remediation in cloud-native applications. Register to attend this webinar on Wednesday, July 28 at 9 a.m. ET / 12 p.m. PT to learn more about this partnership and to experience a deep-dive demo of the joint solution.