Risk Management June 7, 2023

Secure-by-design: Which comes first, code or security?

4 min read - For years, developers and IT security teams have been at loggerheads. While developers feel security slows progress, security teams assert that developers sacrifice security priorities in their quest to accelerate production. This disconnect results in flawed software that is vulnerable…

Application Security October 27, 2021

Why Containers in the Cloud Can Be An Attacker’s Paradise

4 min read - Containers — which are lightweight software packages that include entire runtime environments — have solved the issues of portability, compatibility and rapid, controlled deployment. Containers include an application; all its dependencies, libraries and other binaries; and configuration files needed to…

Intelligence & Analytics September 16, 2021

How DevSecOps Can Secure Your CI/CD Pipeline

2 min read - Many companies today automate their software development life cycle with continuous integration and continuous delivery (CI/CD). It’s part of the broader DevOps movement to speed software development while reducing errors. Continuous integration builds and tests code automatically, while continuous delivery…

Application Security November 7, 2016

Automated Quality and Application Security Testing, Part 1: How to Be Agile With Your Agile Adoption

4 min read - Agile adoption enables security professionals to deliver high-quality, secure software and eliminate the pitfalls common to traditional strategies.

Application Security February 15, 2016

How Can You Maintain Application Security During the Software Development Life Cycle?

2 min read - Maintaining application security throughout the software development life cycle is easier with the help of IBM Security tools.

Mainframe February 25, 2015

Discovering Vulnerabilities: Do More Eyes Find More Bugs?

7 min read - Security vulnerabilities have surprisingly long lifetimes, and organizations can use many methods to respond to and prevent infrastructure threats.