{"id":5197,"date":"2023-06-02T13:33:03","date_gmt":"2023-06-02T17:33:03","guid":{"rendered":"https:\/\/solutionsreview.com\/network-monitoring\/?p=5197"},"modified":"2023-06-02T15:51:31","modified_gmt":"2023-06-02T19:51:31","slug":"a-roadmap-to-modern-application-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/","title":{"rendered":"A Roadmap to Modern Application Security"},"content":{"rendered":"

\"Application<\/p>\n

Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Chrystal Taylor of SolarWinds<\/a> sets the pinpoints on the roadmap and hits the road to modern application security.<\/b><\/em><\/p>\n

\"ExpertIt\u2019s been more than ten years since renowned Silicon Valley venture capitalist Marc Andreeson wrote, \u201cSoftware is eating the world.\u201d It was an easy statement to make at the time. Microsoft had just announced its plan to acquire Skype in an $8.5 billion deal, and earlier that year, IBM Watson beat now-host and all-time Jeopardy! Champion Ken Jennings.<\/p>\n

The software industry\u2019s evolution in the years since Andreeson\u2019s statement has been nothing short of remarkable. Monolithic software hosted on an on-premises server gave way to user-friendly, flexible, and scalable modern applications. These modern applications, which can be built and deployed quickly, have provided companies with a road to digital transformation by enabling employees to be more innovative, efficient, and productive. At the same time, several trade-offs have been related to using modern development processes like microservices, containers, and Kubernetes to build applications. Two of the primary trade-offs are complexity and security.<\/p>\n

The attack surface increases with modern applications, often decentralized across multiple platforms, environments, and infrastructures. These complex, hybrid, and multi-cloud application environments are also difficult to visualize. If you don\u2019t know where an issue is coming from or what\u2019s causing abnormal activity, it\u2019s much harder to address. Another potential area of concern is using open-source code in modern applications. Open-source code is used in nearly every modern application. A report earlier this year found \u201cat least one known open-source vulnerability\u201d in 84 percent of commercial code bases.<\/p>\n

In the market for AppSec solutions? Check out our free APM Solutions Buyer’s Guide<\/strong><\/a>!<\/p>\n

<\/div><\/p>\n

The Roadmap to Application Security<\/strong><\/h2>\n
\n

The solution to this problem is, of course, not to go back to monolithic legacy software. Instead, the industry needs solutions designed to allow us to embrace modern application development in a way capable of ensuring our security. This is possible by building in security testing earlier in the development process, being transparent to customers and the industry about the components and dependencies in each application, and increasing visibility within the application environment.<\/p>\n

These three steps can put organizations on the path to secure modern applications:<\/p>\n

    \n
  1. Build security in with the shift left.<\/strong> Picture you\u2019re an engineer building a car. Before you devote time to this process, you want to test and approve each piece to ensure the vehicle operates safely. This same process should occur in application development through what\u2019s known as the \u201cshift left.\u201d The shift left can improve the development process by embedding security measures earlier. This helps DevOps teams identify vulnerabilities as the application they\u2019re building is being developed. Traditionally, security checks occur after the build is complete in what\u2019s known as the testing phase. If an issue arises during this phase, DevOps teams must work quickly to identify and fix the problem, ultimately slowing down the process and inhibiting a thorough application review. DevOps teams can speed up the process by prioritizing security in the build process and delivering safe, reliable products. Just as you don\u2019t want to get on the road with a faulty steering wheel, you want to ensure each piece of your application runs properly and safely.<\/li>\n
  2. Be transparent by utilizing a software bill of materials.<\/strong> In an age of unforeseeable cyber-attacks by committed nation-state bad actors using novel and sophisticated techniques, the industry needs information sharing more than ever. Being transparent about vulnerabilities and threats is critical to helping ensure the security of our shared cyberinfrastructure. Many positive efforts underway by CISA and other government agencies have been instrumental in enhancing information sharing and collaboration to raise cyber threat awareness, but there\u2019s more work to do. This is why application developers should embrace a similar level of transparency by clearly communicating what goes into their products. This can be done with a software bill of materials (SBOM), essentially an ingredient list for each component of an application. At SolarWinds, we\u2019ve been proud to help lead the industry in calling to make SBOMs a new standard to make the industry more secure. An SBOM is a list of all the components and dependencies comprising a particular software application. Its purpose is to provide transparency and visibility into the software supply chain, which helps developers identify and address vulnerabilities. In turn, SBOMs allow organizations to respond more quickly to security threats. For example, when a new vulnerability is discovered in an open-source library, an SBOM can help identify which applications are affected so teams can take steps to mitigate the risk. This can help organizations avoid costly and time-consuming security breaches by assisting developers to identify points of concern and major and minor issues and predict the final product’s functionality.<\/li>\n
  3. Increase visibility into complex IT environments through observability.<\/strong> Returning to our car analogy, imagine you\u2019ve just finished manufacturing a new car that\u2019s safe and ready to be driven. After a while, regardless of the tests that have been run, the car will inevitably need maintenance, and the check engine light turns on. For most of us, this means bringing the car to a mechanic, who will run a series of diagnostic tests to confirm the problem, tell you how it can be fixed, and how much it will cost. This is a time-consuming and inefficient process. Instead, imagine you had a check engine light designed to tell you what the problem was and provide step-by-step instructions on how to fix it. This increased visibility and the recommended remediation steps are also needed for modern IT environments, and this is where observability comes in. Observability can play a crucial role in application development and security by providing real-time visibility to help detect and remediate security issues. By reducing the Mean Time to Detect (MTTD) security issues, observability can help ensure custom web applications’ security and user satisfaction. By monitoring an application in real-time, teams can identify potential security issues before they become significant problems and quickly take corrective action.<\/li>\n<\/ol>\n

    Why It Matters<\/strong><\/h3>\n

    Modern applications are user-friendly, flexible, and scalable. This enables companies to undergo digital transformation and improve productivity, but the complexity of modern applications and the use of open-source code threaten their security. To help ensure the security of modern applications, organizations must adopt a proactive approach by embedding security measures earlier in the development process, utilizing SBOMs to provide transparency, and increasing visibility through observability. By doing so, organizations can build secure and optimized applications while maintaining the speed and innovation of modern development.<\/p>\n

    \t\t\t

    \"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

    Solutions Review\u2019s Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security. It\u2019s been more than ten years since renowned Silicon Valley venture capitalist Marc Andreeson wrote, \u201cSoftware is eating […]<\/p>\n","protected":false},"author":687,"featured_media":5198,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1,21],"tags":[],"acf":[],"yoast_head":"\nA Roadmap to Modern Application Security<\/title>\n<meta name=\"description\" content=\"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Roadmap to Modern Application Security\" \/>\n<meta property=\"og:description\" content=\"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Network Monitoring Tools & Performance Software | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-02T17:33:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-02T19:51:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chrystal Taylor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chrystal Taylor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/\",\"name\":\"A Roadmap to Modern Application Security\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg\",\"datePublished\":\"2023-06-02T17:33:03+00:00\",\"dateModified\":\"2023-06-02T19:51:31+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/46743497b5653542297ef4682b3aebe1\"},\"description\":\"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg\",\"width\":800,\"height\":400,\"caption\":\"Application Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/network-monitoring\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Roadmap to Modern Application Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#website\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/\",\"name\":\"Network Monitoring Tools & Performance Software | Solutions Review\",\"description\":\"Evaluating Enterprise NPM Software, Network Observability & Packet Analysis Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/46743497b5653542297ef4682b3aebe1\",\"name\":\"Chrystal Taylor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/06c79ac52a0bed04ad286b5d3ca7adfb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/06c79ac52a0bed04ad286b5d3ca7adfb?s=96&d=mm&r=g\",\"caption\":\"Chrystal Taylor\"},\"description\":\"Chrystal Taylor is a dedicated technologist with nearly a decade of experience and has built her career by leveraging curiosity to solve problems, no matter the size, industry, or client. Whether tinkering with the family computer, or inflicting general destruction in MS-DOS Tank Wars, Taylor has always been a geek. Taylor is a SolarWinds deployment veteran who has built a successful IT career by translating client needs into optimized and performant systems. She loves customizing current deployments to ensure systems grow in tandem with user needs. Her focus on capacity planning, server architecture, and troubleshooting allows her to attack any issue on multiple fronts.\",\"url\":\"https:\/\/solutionsreview.com\/network-monitoring\/author\/ctaylor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A Roadmap to Modern Application Security","description":"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/","og_locale":"en_US","og_type":"article","og_title":"A Roadmap to Modern Application Security","og_description":"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.","og_url":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/","og_site_name":"Network Monitoring Tools & Performance Software | Solutions Review","article_published_time":"2023-06-02T17:33:03+00:00","article_modified_time":"2023-06-02T19:51:31+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg","type":"image\/jpeg"}],"author":"Chrystal Taylor","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Chrystal Taylor","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/","url":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/","name":"A Roadmap to Modern Application Security","isPartOf":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg","datePublished":"2023-06-02T17:33:03+00:00","dateModified":"2023-06-02T19:51:31+00:00","author":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/46743497b5653542297ef4682b3aebe1"},"description":"Chrystal Taylor of SolarWinds sets the pinpoints on the roadmap and hits the road to modern application security.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#primaryimage","url":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg","contentUrl":"https:\/\/solutionsreview.com\/network-monitoring\/files\/2023\/06\/A-Roadmap-to-Modern-Application-Security.jpg","width":800,"height":400,"caption":"Application Security"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/network-monitoring\/a-roadmap-to-modern-application-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/network-monitoring\/"},{"@type":"ListItem","position":2,"name":"A Roadmap to Modern Application Security"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#website","url":"https:\/\/solutionsreview.com\/network-monitoring\/","name":"Network Monitoring Tools & Performance Software | Solutions Review","description":"Evaluating Enterprise NPM Software, Network Observability & Packet Analysis Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/network-monitoring\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/46743497b5653542297ef4682b3aebe1","name":"Chrystal Taylor","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/network-monitoring\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/06c79ac52a0bed04ad286b5d3ca7adfb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/06c79ac52a0bed04ad286b5d3ca7adfb?s=96&d=mm&r=g","caption":"Chrystal Taylor"},"description":"Chrystal Taylor is a dedicated technologist with nearly a decade of experience and has built her career by leveraging curiosity to solve problems, no matter the size, industry, or client. Whether tinkering with the family computer, or inflicting general destruction in MS-DOS Tank Wars, Taylor has always been a geek. Taylor is a SolarWinds deployment veteran who has built a successful IT career by translating client needs into optimized and performant systems. She loves customizing current deployments to ensure systems grow in tandem with user needs. Her focus on capacity planning, server architecture, and troubleshooting allows her to attack any issue on multiple fronts.","url":"https:\/\/solutionsreview.com\/network-monitoring\/author\/ctaylor\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5197"}],"collection":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/users\/687"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/comments?post=5197"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/posts\/5197\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media\/5198"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/media?parent=5197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/categories?post=5197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/network-monitoring\/wp-json\/wp\/v2\/tags?post=5197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}