article thumbnail

Beyond DevSecOps: Why fintech companies need to consider DevSecRegOps

CIO Business Intelligence

As the vice president of enterprise architecture and technology strategy at Discover Financial Services, I think about this question often as we work to design our tech stack. DevSecOps refers to development, security, and operations. DevSecOps refers to development, security, and operations.

Company 143
article thumbnail

Securing Your APIs

ForAllSecure

It’s safe to say that APIs are now a critical part of modern application architectures today. In the age of SaaS applications and infrastructure, many architectures are designed around being API-first for managing data ingestion and retrieval. This architecture allows testing to be ingrained into all aspects of the SDLC.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Why Fuzz Testing Is Indispensable: Billy Rios

ForAllSecure

I recently spoke to Gartner on the addition of fuzz testing to their Critical Capabilities for the Application Security Testing Magic Quadrant. He has led security engineering and product security programs at organizations with the most advanced fuzz testing programs, such as Google and Microsoft. This is key.

SDLC 52
article thumbnail

The FuzzCon 2021 Real Talks Panel

ForAllSecure

In the Fuzzing Real Talks session, Ransome was joined by industry experts Anmol Misra of Autodesk, Larry Maccherone of Contract Security, Damilare D. Fagbemi of Resilient Software Security, and Jeff Costlow of Extrahop Networks to discuss the ins and outs of a successful security testing program. Organizational. The reason?

SDLC 52
article thumbnail

Leveraging Fuzz Testing to Achieve ED-203A / DO-356A

ForAllSecure

Like any software-based system, aerospace must continually and proactively find and fix security and safety issues before cyber-attackers can exploit them. In 2018 the aerospace industry published DO-356A, Airworthiness Security Methods and Considerations , to provide updated guidance on airworthiness cybersecurity.

article thumbnail

Leveraging Fuzz Testing to Achieve ED-203A / DO-356A

ForAllSecure

Like any software-based system, aerospace must continually and proactively find and fix security and safety issues before cyber-attackers can exploit them. In 2018 the aerospace industry published DO-356A, Airworthiness Security Methods and Considerations , to provide updated guidance on airworthiness cybersecurity.

article thumbnail

When least privilege is the most important thing

CIO Business Intelligence

In the ever-evolving realm of information security, the principle of Least Privilege stands out as the cornerstone of safeguarding sensitive data. Organizations that follow the principle of least privilege can improve their security posture by significantly reducing their attack surface and risk of malware spread.

Backup 127