article thumbnail

InfoSec 2022 guide: How DevSecOps practices drive organizational resilience

Dynatrace

Open source code, for example, has generated new threat vectors for attackers to exploit. Considering open source software (OSS) libraries now account for more than 70% of most applications’ code base, this threat is not going anywhere anytime soon. Spring4Shell vulnerabilities expose Java Spring Framework apps to exploitation.

article thumbnail

RSA guide 2024: AI and security are top concerns for organizations in every industry

Dynatrace

In fact, according to the recent Dynatrace survey, “ The state of AI 2024 ,” 95% of technology leaders are concerned that using generative AI to create code could result in data leakage and improper or illegal use of intellectual property. Learn how security improves DevOps. What is generative AI? What is DevSecOps?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Application observability meets developer observability: Unlock a 360º view of your environment

Dynatrace

In a recent webinar , Dynatrace DevOps activist Andi Grabner and senior software engineer Yarden Laifenfeld explored developer observability. DevOps, SREs, developers… everyone will ask questions. The DevOps people looking end-to-end. But developers need code-level visibility and code-level data.”

article thumbnail

Black Hat 2023: Pairing causal AI and generative AI for cybersecurity threats

Dynatrace

Developers use generative AI to find errors in code and automatically document their code. They can also use generative AI for cybersecurity, write prototype code, and implement complex software systems. Learn how security improves DevOps. DevOps vs DevSecOps: Why integrate security and DevOps?

DevOps 187
article thumbnail

Dynatrace Runtime Vulnerability Analysis now covers the entire application stack

Dynatrace

DevOps teams, SREs (site reliability engineers), platform teams, and SecOps teams aren’t always working from a common source of truth: SAST tools (static application security testing) provide scanning code for vulnerabilities. Dynatrace extends its Runtime Vulnerability Analysis to Go on top of Java ,NET , Node.js

Java 243
article thumbnail

RSA Guide 2023: Cloud application security remains core challenge for organizations

Dynatrace

For example, the open source Java library at the heart of the Log4Shell crisis in 2021 was patched within days given the pervasiveness of the code. How vulnerabilities are evaluated – platform module Learn the mechanism that Dynatrace Application Security uses to generate third-party vulnerabilities and code-level vulnerabilities.

Cloud 189
article thumbnail

Advance DevSecOps practices with a vulnerability management strategy

Dynatrace

In the Advancing DevOps and DevSecOps track, sessions aim to help security pros, developers, and engineers as they brace for new threats that are costly and time-consuming to address. The vulnerability is located in Log4j 2, an open-source Apache Java software used to run logging services in a host of front-end and backend applications.

Strategy 205