CIO Business Intelligence
OCTOBER 31, 2023
As the vice president of enterprise architecture and technology strategy at Discover Financial Services, I think about this question often as we work to design our tech stack. As a practice, DevSecOps is a way to engrain practices in your SDLC that ensures security becomes a shared responsibility throughout the IT lifecycle.
ForAllSecure
DECEMBER 20, 2022
Software application vulnerabilities fall into three different risk categories : Known Known : Known Knowns are identifiable risks that are known to lead to compromise. Static Application Security Testing (SAST), or static analysis tools uncover bugs by analyzing source code. SAST is best used during the SDLC development phase.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
CIO Business Intelligence
JULY 6, 2023
DDoS attacks that target networks, applications, and APIs can seemingly come out of nowhere. In fact, 42% of SECaaS adopters in F5’s 2023 State of Application Strategy survey cited speed as the main driver. Threats are emerging at a speed that makes it difficult for internal security practitioners to keep pace. Zero Trust
Dataconomy
APRIL 5, 2024
By having an effective strategy and making timely changes based on the data obtained, startups have a good chance of expanding scale and optimizing profits. This requires a clear product concept describing the proposed business plan, direct and indirect competitors, as well as monetization strategy. Image credit ) 4. Image credit ) 4.
ForAllSecure
MAY 2, 2023
To mitigate these risks, organizations are increasingly turning to DevSecOps, a methodology that integrates security into the software development process from the very beginning, with the goal of delivering safer applications, faster. Develop During the development phase, development teams both build and test the application.
ForAllSecure
SEPTEMBER 2, 2021
I recently spoke to Gartner on the addition of fuzz testing to their Critical Capabilities for the Application Security Testing Magic Quadrant. It’s also why it makes sense to work with a fuzzing vendor for the one time installation -- so it can be deployed with the right strategy. They’re just too valuable.
CIO Business Intelligence
SEPTEMBER 1, 2023
A happy developer is one who’s writing code,” said Joe Mills, Director of Transformation Strategy and Automation at Discover. “So, If there’s a code structure that has to be reused every time you’re creating an application, that structure can be standardized as a template,” said Stoyko. The result?
Expert insights. Personalized for you.
143 
Let's personalize your content