Shift in Key Security Decision Makers Creates New Risks as Companies Migrate Applications into Microservices
October 10 2019 - 6:00AM
Radware® (NASDAQ: RDWR), a leading provider of cyber security and
application delivery solutions, released its
2019 State of
Web Application Security Report. Radware found that while
organizations shift their applications to microservices
environments, the responsibility for securing these environments
shifts as well. The rapid expansion of the Development
Security Operations (DevSecOps) role has changed how companies
address their security posture with approximately 70% of survey
respondents stating that the CISO was not the top influencer in
deciding on security software policy, tools and or implementation.
This shift has likely exposed companies to a broader range of
security risks and gaps in protection.
In fact, 90% of respondents reported data breaches within the
past 12 months, and 53% of respondents believe that cloud data or
application data exposures resulted from misunderstandings of
security responsibility with their cloud provider.
David Monahan, former Managing Research Director, Security and
Risk Management for EMA said, “The current movement to containers
and microservices is fundamentally different in its offer for ease
of deployment, creating the ability for continuous integrations and
continuous development (CICD) and improved application performance.
Simultaneously, it brings some intrinsic risks.”
“We are at an inflection point culturally
between the role of DevSecOps and the CISO,” said Anna
Convery-Pelletier, Radware’s Chief Marketing Officer. “Our research
shows that respondents— regardless of title— feel that they have
control over their security posture. Yet 90% of organizations still
experienced lost data. This is a contradiction that speaks to
the organizational differences between DevSecOps and traditional IT
security roles. While the CISO’s organization is faced with
responsibility for keeping the organization secure at all costs,
the DevSecOps teams recognize that agility is critical to business
operations, and so they are often forced to take a ‘good enough’
approach.”
Move to MicroServices
Organizations are adjusting roles and responsibilities to cope
with both the agility and security requirements that accompany
these new environments. More than 90% of respondents reported that
their organizations have Development Operations (DevOps) or
DevSecOps teams. These teams [DevSecOps + DevOps] are
relatively new with only 21% of respondents reporting DevSecOps
teams in place for longer than 24 months. More than half (58%) of
organizations reported a ratio of between 1:6 and 1:10 DevSecOps to
development personnel. When evaluating collaboration between DevOps
and DevSecOps teams, 49% said the teams were working very closely
while 46% said they were managing to work together.
Trust in cloud security providers is falling.
In 2018, 86% of respondents said they trusted their cloud
providers’ level of security. One year later, that figure has
dropped 14 points to 72%.
Application Attacks Prevail
The report shows that application attacks are a constant threat.
The breadth of attacks respondents experienced daily included
access violations, session/cookie poisoning, SQL injections, denial
of service, protocol attacks, cross-site scripting, cross-site
request forgery, and API manipulations.
In addition to survey data, the report also includes trends from
Radware’s Bot Manager customers’ traffic flow, which identified
that 45% of internet traffic comes from bots. The breakdown of bot
traffic indicates that 17% of traffic is sourced from ‘good’ bots,
and 28% is malicious.
To read the full report, please visit
https://www.radware.com/resources/was-report-2019/.
Methodology
On behalf of Radware, Enterprise Management Associates, Inc.
(EMA) conducted a global, online survey in July 2019 that collected
278 responses from executives and senior IT professionals at
companies with at least 250 million USD/EUR/GBP in revenue and a
worldwide scope. About one-third of respondents hold an
executive-level position (29%), another third of respondents are in
senior management (27%) and a-third are managers (32%). The
remaining respondents are mostly individual contributors (10%).A
variety of industries are represented in the survey, with the
largest industry segments being technology products and financial
services.
THIS PRESS RELEASE AND THE REPORT ARE PROVIDED FOR INFORMATIONAL
PURPOSES ONLY. THESE MATERIALS ARE NOT INTENDED TO BE AN INDICATOR
OF RADWARE'S BUSINESS PERFORMANCE OR OPERATING RESULTS FOR ANY
PRIOR, CURRENT OR FUTURE PERIOD.
About Radware
Radware® (NASDAQ: RDWR), is a global leader of cyber
security and application delivery solutions for physical,
cloud, and software defined data centers. Its award-winning
solutions portfolio secures the digital experience by providing
infrastructure, application, and corporate IT protection and
availability services to enterprises globally. Radware’s solutions
empower more than 12,500 enterprise and carrier customers worldwide
to adapt to market challenges quickly, maintain business continuity
and achieve maximum productivity while keeping costs down. For more
information, please visit www.radware.com.
Radware encourages you to join our community and follow us
on: Facebook, LinkedIn, Radware Blog,
Twitter, YouTube, Radware Connect app for iPhone®
and our security center DDoSWarriors.com that provides a
comprehensive analysis on DDoS attack tools, trends and
threats.
©2019 Radware Ltd. All rights reserved. The Radware products and
solutions mentioned in this press release are protected by
trademarks, patents and pending patent applications of Radware in
the U.S. and other countries. For more details please
see: https://www.radware.com/LegalNotice/. All other
trademarks and names are property of their respective owners.
Media Contacts:Deborah
SzajngartenRadware201-785-3206deborah.szajngarten@radware.com
Investor Relations:Anat Earon-Heilborn+972
723917548ir@radware.com
A graphic accompanying this announcement is available at
https://www.globenewswire.com/NewsRoom/AttachmentNg/7e63ab82-7acc-4c10-a776-90ede5f58289
RADWARE (NASDAQ:RDWR)
Historical Stock Chart
From Mar 2024 to Apr 2024
RADWARE (NASDAQ:RDWR)
Historical Stock Chart
From Apr 2023 to Apr 2024