Reduce Your Open Source Security Risk: Strategies, Tactics, and Tools

The following is external content provided as a free resource for blog readers.

There’s no doubt that open source software (OSS) is here to stay, but that doesn’t mean that developers can feel free to use all and any open source software components with no thought to the vulnerabilities and security issues they may introduce into development projects. The fact is, there’s no such thing as bulletproof, bug-free, automatically license compliant, and easily auditable software. Not in the open source world and not in the commercial off the shelf (COTS) world. So, it’s incumbent on developers, project team leaders, IT managers, CIOs and CTOs to ensure that there are sound strategies and tactics making it easy to acquire, distribute, use, monitor, analyze, and keep track of open source software to reduce the risk of vulnerable and buggy software and applications to an absolute minimum. Request Free!

Defend Against Injection-based Attacks

The following is external content provided as a free resource for blog readers.

Security weaknesses today occur most often in software that is accessible from a user’s desktop, tablet, or mobile device. Web-based applications, network-enabled or controlled devices, and widely-used mobile software are the applications most targeted. This is followed by infrastructure applications such as operating systems, web servers, and browser-based software including plug-ins and extensions. The cause of these weaknesses typically stems from the developer not anticipating how the software could be misused and made to perform actions it wasn’t designed to do. The root problem is often a lack of secure input handling to block any application input or content that has not first been scanned for and had any harmful aspects filtered out.  Request Free!

Relatrio de defesa contra ataques cibernticos 2015 - Resumo executivo (Um relatrio do CyberEdge Group)

The following is external content provided as a free resource for blog readers.

O segundo relatório anual de defesa contra ataques cibernéticos do CyberEdge Group oferece uma visão aprofundada sobre como os profissionais de segurança de TI percebem ataques cibernéticos e planejam defender-se deles. Com base em uma pesquisa feita com mais de 800 tomadores de decisÕes e profissionais de segurança de TI, realizada em dezembro de 2014, o relatório apresenta inúmeras observações que as equipes de segurança de TI podem usar para entender melhor como suas percepções, prioridades e posturas de segurança se comparam ás de seus colegas de profissão. Request Free!