Enhancing observability with IAST | AppSec | Contrast Security
Observability has become crucial in software engineering as modern applications grow more complex and distributed. The rise of microservices coupled with the widespread adoption of application programming interfaces (APIs) and cloud-native architectures have necessitated a more comprehensive understanding of system performance and health. This movement started in the 2010s and ... Read More
Debunking myths around RASP (Runtime Application Self-Protection) technology
Welcome to the second part of this series examining some of the myths that I’ve heard in many conversations around Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) while working at Contrast. Over the past four years, I have had the pleasure of discussing RASP with both open-minded ... Read More
Debunking IAST myths
If you have followed Contrast's progress over the years, you will recognize us as a leading provider of Interactive Application Security Testing (IAST)/ Runtime Application Self-Protection (RASP) (and recently Static Analysis Security Testing [SAST!]) provider. Contrast has been working on security instrumentation for nearly a decade now, and during my ... Read More
Extending Protection With Azure Sentinel
Applications are perpetually accosted by hackers intent on doing harm to your business. They'll dig and look under the covers for any exploitable entry point they can find. At the same time, development teams struggle to deal with a backlog of unremediated application vulnerabilities, especially if they’re using inaccurate legacy ... Read More
Real-time Remediation Support Helps Developers Write Better Code
Learning From Our Software Development Mistakes Like anyone else, I hate making mistakes. When I do, I usually feel that I could have avoided it by learning more about the subject or maybe by asking for help. Good intentions aside, however, the reality is that we will still make mistakes ... Read More
Elite Performers Choose Simpler Tools
I was fascinated to read this year’s Accelerate State of DevOps Report 2019 which now represents six years of research and data from over 31,000 professionals in our industry. It delivers insight into the practices and capabilities that drive high performance. By following the advice in the report, teams can ... Read More
Blockchain: Hype or Hope for Transactional Security?
It has been said that time is nature’s way of making sure everything doesn’t happen at once. In practice, time is a good way to make sure that events happen in order: that payment happens before title is conveyed or that authentication happens before privileges are granted. It has also ... Read More
