![The Edge Logo The Edge Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt530eb1f4e672eb44/653a71690e92cc040a3e9d6d/Dark_Reading_Logo_TheEdge_0.png?width=700&auto=webp&quality=80&disable=upscale)
Cybersecurity In-Depth: Digging into data about the latest attacks, threats, and trends using charts and tables.
Outsourced Software Poses Greater Risks to Enterprise Application Security
In the wake of SolarWinds and other third-party attacks, security teams worry that outsourced applications pose risks to an organization's application security, according to Dark Reading's recent "How Enterprises Are Developing Secure Applications" report.
In light of SolarWinds and other high-profile attacks involving the software supply chain, security teams are increasingly scrutinizing the security of their off-the-shelf software. A recent Dark Reading survey of 173 IT and cybersecurity professionals identified different types of risk to enterprise application security, including attackers with deep knowledge of application vulnerabilities, developers untrained in secure coding practices, outsourced applications, and poorly secured infrastructure.
Dark Reading's "How Enterprises Are Developing Secure Applications" report shows attitudes over application security risks remain largely unchanged this year compared to 2020, despite the broad disruptions to IT operations associated with the shift to remote work and restrictions associated with the global COVID-10 pandemic. For instance, 34% of respondents in the 2021 survey said attackers with a deep knowledge of how to exploit app vulnerabilities are the greatest risk to the security of their application environments, compared with 35% last year, and 27% are worried about security issues tied to outsourced applications, compared with 25% last year.
Respondents also indicated they are slightly more worried about risks related to outsourced applications and poorly secured infrastructure this year than they were last year. Twenty-seven percent said outsourced applications pose risks to the organization's application security in the 2021 survey, compared with 25% in 2020, and 24% are worried about poorly secured infrastructure in 2021, compared with 21% in 2020. In other areas, respondents appear to be less worried, at least when it comes to adequate developer security training, DevOps practices, and management support for application security. In the 2021 survey, just 30% of respondents said they are worried about developers untrained in security, compared with 38% who said the same in 2020.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024