{"id":52246,"date":"2022-11-01T07:14:00","date_gmt":"2022-10-31T23:14:00","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=52246"},"modified":"2022-10-28T14:15:08","modified_gmt":"2022-10-28T06:15:08","slug":"prisma-cloud-delivers-context-aware-software-composition%ef%bf%bc","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2022\/11\/01\/prisma-cloud-delivers-context-aware-software-composition%ef%bf%bc\/","title":{"rendered":"Prisma Cloud delivers context-aware software composition\ufffc"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Open-source software is a critical component of cloud-native applications, allowing developers greater speed and modularity without having to reinvent the wheel each time they code. However, as the <a href=\"https:\/\/www.paloaltonetworks.com\/prisma\/unit42-cloud-threat-research-2h21\">Unit 42 Cloud Threat Report, 2H 2021<\/a> found, open-source software can often contain known vulnerabilities, which can open organizations up to significant risk.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Palo Alto Networks, the global cybersecurity leader, recently introduced the industry\u2019s first context-aware software composition analysis (SCA) solution to help developers safely use open-source software components. The integration of SCA into Prisma Cloud further demonstrates why Palo Alto Networks is <a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2022\/03\/prisma-cloud-leader-in-forrester-cws-wave\/\">the leading provider of cloud-native security<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Traditional SCA solutions are standalone products that can produce a large number of alerts but lack the runtime context to help fix vulnerabilities. With the addition of SCA to the Prisma Cloud platform, developers and security teams can proactively surface and prioritize known vulnerabilities that impact the application lifecycle (i.e., code, build, deploy and run). Prisma Cloud SCA delivers deep dependency detection and remediation of vulnerabilities in open-source software before applications reach production. It can also help developers prioritize remediation based on software components that are already in use. These capabilities are not possible when SCA solutions are deployed as single-point products.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cDevelopers leveraging open source software should be able to build applications with the confidence they aren\u2019t opening the organization up to risk,\u201d said Ankur Shah, senior vice president, Prisma Cloud, Palo Alto Networks. \u201cWith the average application consisting of <a href=\"https:\/\/www.forrester.com\/report\/the-state-of-application-security-2021\/RES164041?objectid=RES164041\">75%<\/a> open source components, SCA on Prisma Cloud is key to protecting the organization from code to cloud and empowering developers to build with speed.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a complete cloud-native application protection platform (CNAPP), Prisma Cloud is context-aware at every stage of the application lifecycle to provide a unified view of risk across organizations&#8217; cloud environments. Where current approaches to cloud security rely on siloed products that provide intermittent visibility without remediation, Prisma Cloud approaches cloud security with a comprehensive, prevention-first framework. With <a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2021\/11\/cloud-incident-response-services\/\">188%<\/a> increase in cloud incident response cases over the past three years, this shift in approach has become mandatory.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A complete code-to-cloud CNAPP needs to incorporate the following five key principles in order to keep organizations safe:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Security from code to cloud<\/strong> \u2014 protects applications at every stage of the development lifecycle \u2014 from code, build, deploy and run.<\/li><li><strong>Continuous, real-time visibility<\/strong> \u2014 uses real-time and contextual security analysis of cloud environments to help prevent misconfigurations, vulnerabilities, and threats.<\/li><li><strong>Prevention-first protection <\/strong>\u2014 stopping attacks and defending against zero-day vulnerabilities to drive down mean time to remediation.<\/li><li><strong>Choice for every cloud journey<\/strong> \u2014 aligning security needs with current and future cloud priorities by supporting a breadth of cloud service providers, workload architectures, continuous integration and continuous delivery (CI\/CD) pipelines, integrated development environments (IDEs), and repositories with a unified platform<\/li><li><strong>Cloud scale security<\/strong> \u2014 consistently secures applications as cloud environments scale.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to SCA and to further increase the safety of cloud-native applications, Prisma Cloud introduced a software bill of materials (SBOM) <a href=\"http:\/\/paloaltonetworks.com\/blog\/prisma-cloud-announces-software-composition-analysis\">among other capabilities<\/a> for developers to easily maintain and reference a complete codebase inventory of every application component used across cloud environments. Implementing SCA and SBOM ensures Prisma Cloud aligns with these principles.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Buyers looking for cloud-native security solutions need to keep the requirements of microservices security protection in mind. The &#8216;bolted-on&#8217; and &#8216;whack-a-mole&#8217; approaches are a thing of the past,\u201d said Frank Dickson, program vice president, Security, and Trust at IDC. \u201cSecurity should be embedded throughout the application development life cycle. This means that buyers need to fundamentally change their approach to security, although they need to continue to protect their run-time environments, they must also embrace solutions that embed security in the application development process, an approach referred to as &#8216;shift left.&#8217; Shift left requires one to think less about security products and more about continuous security processes.&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Palo Alto Networks, the global cybersecurity leader, recently introduced the industry\u2019s first context-aware software composition analysis (SCA) solution to help developers safely use open-source software components. The integration of SCA into Prisma Cloud further demonstrates why Palo Alto Networks is the leading provider of cloud-native security.<\/p>\n","protected":false},"author":1,"featured_media":52247,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[1887,96,2727,1656],"class_list":["post-52246","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","tag-palo-alto-networks","tag-technology","tag-technology-adaption","tag-technology-investment"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/52246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=52246"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/52246\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/52247"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=52246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=52246"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=52246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}