Tooling fatigue and false positives are impeding ability to maintain adequate security across new and existing application architectures
Fastly, Inc., a global edge cloud platform provider, released new research in partnership with Enterprise Strategy Group (ESG) that uncovers a crucial need for a unified, modern, and simplified approach to security. The study, based on insights from information security and IT professionals representing hundreds of organizations globally, revealed growing concerns around adequately securing the rapidly rising number of mission-critical cloud services and API-centric applications. Outdated offerings, false positives, and ineffective blocking are among the main causes driving this global concern.
Recommended ITech News: Blue Prism & Lateetud, INC. Recognized as Finalists of the 2021 Microsoft AI Partner of the Year
“The responsibility for protecting enterprise assets, data, and users from cyber threats no longer falls solely on the security organization, even as the threat landscape becomes increasingly complex. Application security in particular, is a team sport that requires input and cross-functional collaboration across
As organizations around the world are faced with the task to digitally transform, many of the traditional tools and services no longer support the modern needs and architectures of the digitized world. While the increased need for flexibility, agility, and speed continues to drive the evolution of application development and increased deployment of microservice-based architectures, many organizations have not updated their security tooling and continue to rely on traditional web application and API security tools to protect their business.
“One of the biggest security challenges we are seeing today is that technologies are rapidly evolving to better serve the growing demand for digital experiences, but the security offerings that protect those technologies are not experiencing that same level of transformation — and often erode the benefits of modern technology stacks,” said Kelly Shortridge, Senior Principal Technologist at Fastly. “Security tools should fuel innovation, actively support service resilience, and minimize disruption to software delivery workflows, rather than slowing build cycles and producing disjointed, unactionable, or irrelevant data.”
Recommended ITech News: Netskope Attracts $300 Million in Additional Investment, Elevating Valuation to $7.5 Billion
Research from the study concludes:
- On average, organizations use 11 web application and API security tools and spend close to $3 m************** annually. Security is becoming more complex and costly as organizations are required to protect traditional architectures, in addition to new architectures and cloud environments.
- Traditional security tools are ineffective and impede business growth. Current security tools frequently block harmless business traffic, impacting the organization’s bottom line. As a result, 91% of organizations run tools in log or monitoring mode, or shut them off entirely.
- Nearly half of all security alerts are false positives. False positive downtime frequently causes similar downtime to actual attacks, suggesting current security tools are causing more problems than they solve for.
- More than half of organizations believe most or all of their applications will use APIs in the next two years. Despite an anticipated increase in API implementation, half of organizations stated that web application and API security’s is more difficult than two years ago and indicated struggles to maintain adequate security’s across new application architectures. Driving these difficulties is the shift to public cloud and API-centric applications without a modern security solution to support those innovations.
Recommended ITech News: Utilities Service Provider DRF Taps Edify for Contact Center and Unified Communications
“The responsibility for protecting enterprise assets, data, and users from cyber threats no longer falls solely on the security’s organization, even as the threat landscape becomes increasingly complex. Application security’s in particular, is a team sport that requires input and cross-functional collaboration across many parts of an organization,” said John Grady, Senior Analyst at ESG. “As a result, security’s professionals have become frustrated with the complex and siloed nature of traditional application security’s solutions that fail to address these issues. Modern businesses require uniform tools and approaches that can minimize vulnerabilities between their public cloud infrastructure, microservices-based architecture, and legacy applications, while supporting a variety of personas.”
Recommended ITech News: TeamViewer Recognized as a Finalist of the 2021 Microsoft Apps & Solutions for Microsoft Teams Partner of the Year
