{"id":36782,"date":"2020-08-25T13:00:11","date_gmt":"2020-08-25T13:00:11","guid":{"rendered":"https:\/\/blog.trendmicro.com\/?p=544462"},"modified":"2020-08-25T13:00:11","modified_gmt":"2020-08-25T13:00:11","slug":"removing-open-source-visibility-challenges-for-security-operations-teams","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/removing-open-source-visibility-challenges-for-security-operations-teams\/","title":{"rendered":"Removing Open Source Visibility Challenges for Security Operations Teams"},"content":{"rendered":"

<\/p>\n

Identifying security threats early can be difficult, especially when you\u2019re running multiple security tools across disparate business units and cloud projects. When it comes to protecting cloud-native applications, separating legitimate risks from noise and distractions is often a real challenge.<\/p>\n

That\u2019s why forward-thinking organizations look at things a little differently. They want to help their application developers and security operations (SecOps) teams implement unified strategies for optimal protection. This is where a newly expanded partnership from Trend Micro and Snyk can help.<\/p>\n

Dependencies create risk<\/strong><\/p>\n

In today\u2019s cloud-native development streams, the insatiable need for faster iterations and time-to-market can impact both downstream and upstream workflows. As a result, code reuse and dependence on third-party libraries has grown, and with it the potential security, compliance and reputational risk organizations are exposing themselves to.<\/p>\n

Just how much risk is associated with open source software today? According to Snyk research, vulnerabilities in open source software have increased 2.5x in the past three years. https:\/\/info.snyk.io\/sooss-report-2020<\/a>. What\u2019s more, a recent report<\/a> claimed to have detected a 430% year-on-year increase in attacks targeting open source components, with the end goal of infecting the software supply chain. While open source code is therefore being used to accelerate time-to-market, security teams are often unaware of the scope and impact this can have on their environments.<\/p>\n

Managing open source risk<\/strong><\/p>\n

This is why cloud security leader Trend Micro, and Snyk, a specialist in developer-first open source security, have extended their partnership with a new joint solution. It\u2019s designed to help security teams manage the risk of open source vulnerabilities from the moment code is introduced, without interrupting the software delivery process.<\/p>\n

This ambitious achievement helps improve security for your operations teams without changing the way your developer teams work. Trend Micro and Snyk are addressing open source risks by simplifying a bottom-up approach to risk mitigation that brings together developer and SecOps teams under one unified solution. It combines state-of-the-art security technology with collaborative features and processes to eliminate the security blind spots that can impact development lifecycles and business outcomes.<\/p>\n

Available as part of Trend Micro Cloud One, the new solution being currently co-developed with Snyk will:<\/p>\n