Cloud-native architectures break traditional approaches to application security

An image of Cloud, Cloud, Cloud-native architectures break traditional approaches to application security

New research shows that just 3% of organisations have real-time visibility into runtime vulnerabilities, as multi-cloud environments, Kubernetes, and DevSecOps drive digital transformation.

Software intelligence company Dynatrace announced the findings of an independent global survey of 700 CISOs, which reveals the rising adoption of cloud-native architectures, DevOps, and agile methodologies have broken traditional approaches to application security. As organisations shift more responsibility “left” to developers to accelerate innovation, increasingly complex IT ecosystems and outdated security tooling can slow releases by leaving blind spots and forcing teams to manually triage countless alerts, many of which are false positives reflecting vulnerabilities in libraries that are not used in production. Organisations are calling for a new approach that is optimised for multi-cloud environments, Kubernetes, and DevSecOps. The complimentary report, “Precise, automatic risk and impact assessment is key for DevSecOps”, is available for download here.

This research reveals:

  • 89% of CISOs say microservices, containers, and Kubernetes have created application security blind spots.
  • 97% of organisations do not have real-time visibility into runtime vulnerabilities in containerised production environments.
  • Nearly two-thirds (63%) of CISOs say DevOps and Agile development have made it more difficult to detect and manage software vulnerabilities.
  • 74% of CISOs say traditional security controls such as vulnerability scanners no longer fit today’s cloud-native world.
  • 71% of CISOs admit they are not fully confident code is free of vulnerabilities before going live in production.

“The increased use of cloud-native architectures has fundamentally broken traditional approaches to application security,” said Bernd Greifeneder, Founder and Chief Technology Officer at Dynatrace. “This research confirms what we’ve long anticipated: manual vulnerability scans and impact assessments are no longer able to keep up with the pace of change in today’s dynamic cloud environments and rapid innovation cycles. Risk assessment has become nearly impossible due to the growing number of internal and external service dependencies, runtime dynamics, continuous delivery, and polyglot software development which uses an ever-growing number of third-party technologies. Already stretched teams are forced to choose between speed and security, exposing their organisations to unnecessary risk.”

Additional findings include:

  • On average, organisations need to react to 2,169 new alerts of potential application security vulnerabilities each month.
  • 77% of CISOs say most security alerts and vulnerabilities are false positives that do not require actioning as they are not actual exposures.
  • 68% of CISOs say the volume of alerts makes it very difficult to prioritise vulnerabilities based on risk and impact.
  • 64% of CISOs say developers do not always have time to resolve vulnerabilities before code moves into production.
  • 77% of CISOs say the only way for security to keep up with modern cloud-native application environments is to replace manual deployment, configuration, and management with automated approaches.
  • 28% of CISOs say application teams sometimes bypass vulnerability scans to speed up software delivery.

“As organisations embrace DevSecOps, they also need to give their teams solutions that offer automatic, continuous, and real-time risk and impact analysis for every vulnerability, across both pre-production and production environments, and not based on point-in-time ‘snapshots’,” continued Greifeneder. “With the Application Security Module on the Dynatrace Software Intelligence Platform, organisations can leverage the automation, AI, scalability, and enterprise-grade robustness of Dynatrace, and extend this to deliver more secure release cycles with confidence their cloud-native applications are free from exposures.”

The report is based on a global survey of 700 CISOs in large enterprises with over 1,000 employees, conducted by Coleman Parkes and commissioned by Dynatrace in 2021.

The sample included 200 respondents in the U.S., 100 in the UK, France, Germany, and Spain, and 50 in Brazil and Mexico, respectively.

READ MORE:

About Dynatrace

Dynatrace provides software intelligence to simplify cloud complexity and accelerate digital transformation. With automatic and intelligent observability at scale, our all-in-one platform delivers precise answers about the performance and security of applications, the underlying infrastructure, and the experience of all users to enable organisations to innovate faster, collaborate more efficiently, and deliver more value with dramatically less effort. That’s why many of the world’s largest enterprises trust Dynatrace® to modernise and automate cloud operations, release better software faster, and deliver unrivalled digital experiences.

For more news from Top Business Tech, don’t forget to subscribe to our daily bulletin!

Follow us on LinkedIn and Twitter

An image of Cloud, Cloud, Cloud-native architectures break traditional approaches to application security

Luke Conrad

Technology & Marketing Enthusiast

Nutanix on OVHcloud US Offers a Hybrid Multicloud Solution

Joon Lee • 11th September 2023

Nutanix is a leading cloud computing software company that helps companies simplify their cloud strategies by using hyperconverged infrastructure (HCI) environments. Hyperconvergence is a software-centric architecture that tightly integrates compute, storage, networking, and virtualization resources and other technologies on commodity hardware servers supported by a single vendor.

OVHcloud Is at the Forefront of the Data Revolution

Karen Kokiko • 11th September 2023

Information technology is going through a digital transformation and reshaping how we do business, how we interact, how we make decisions, and how we influence our society. OVHcloud® is at the forefront of this data revolution, standing apart from the competition with a strong commitment to creating a level playing field and the opportunity for...

Right Sizing & Workload Optimization in the Cloud

Joon Lee • 11th September 2023

Organizations facing the challenges of scaling their cloud infrastructure can achieve improved performance by implementing the principles of right sizing their infrastructure. This practice is essential for optimizing cloud infrastructure and enhancing its overall effectiveness. In this guide, we will discuss the benefits of right sizing, including optimizing costs, eliminating waste and improving performance. We’ll...

OVHcloud Is at the Forefront of the Data Revolution

Karen Kokiko • 11th September 2023

Information technology is going through a digital transformation and reshaping how we do business, how we interact, how we make decisions, and how we influence our society. OVHcloud® is at the forefront of this data revolution, standing apart from the competition with a strong commitment to creating a level playing field and the opportunity for...

Can Europe take on the US Cloud giants?

Richard Hilton • 30th August 2023

With so many issues coming up about cloud storage, what is the solution to the dominance of the major giants like AWS (32%), Microsoft (23%) and Google (10%) taking 65% of the world cloud market?

The race to dominate the AI space

Kevin Cole • 24th August 2023

The launch of Chat GPT-4 in March of this year provided the catalyst for a conversation that has been gaining momentum for some time now: How will artificial intelligence (AI) change the world?