New Research Reveals Companies Are Losing the Web Application Security War

by Timothy Chiu, VP of Marketing on October 15, 2020

A new report was recently released by Acunetix, along with Dimensional Research and studied how organizations are handling web application security. After 382 professionals were surveyed, Acunetix released the report title, “Web Application Security – Enterprises are Losing the War.” The report found that companies are struggling to keep up with the rapidly evolving threats, and that attacks on web applications have increased to become the single largest cause of data breaches.

The single biggest cause of data breaches is now attacks on web applications. With the increase in attacks and the advanced threats that attack web applications, organizations need to re-evaluate how they are handling security for their applications. May be it’s time to take a hint from the recent finalization of the National Institute of Standards and Technology (NIST)’s SP800-53 that was just released on September 23, 2020. The new standard now requires Runtime Application Self-Protection (RASP) as part of the framework.

RASP solutions like the one from K2 Cyber Security offer significant application protection while at the same time using minimal resources and adding negligible latency to an application. K2 Security Platform uses runtime deterministic security to monitor the application and has a deep understanding of the application’s control flows, DNA and execution. By validating the application’s control flows, deterministic security is based on the application itself, rather than relying on past attacks to determine a zero day attack. Deterministic security results in the detection of sophisticated zero day attacks and also protects from application from the risks listed in the OWASP Top Ten, including XSS and SQL Injection.

K2’s Next Generation Application Workload Protection Platform addresses today’s need for runtime security in an easy to use, easy to deploy solution. K2’s unique deterministic security detects new attacks without the need to rely on past attack knowledge, is lightweight, and adds under a millisecond of latency to the running application. To aid in quick remediation of vulnerabilities, K2 also provides detailed attack telemetry including the code module and line number being in the code being attacked, while at the same time integrating with leading firewalls to do real time attacker blocking.