devopsy.kinsta.cloud

Tag: cyberark

  • GitGuardian Allies With CyberArk to Better Protect App Secrets

    GitGuardian Allies With CyberArk to Better Protect App Secrets

    GitGuardian this week revealed it has allied with CyberArk to streamline secrets detection and management by making it easier to share insights.

    Ziad Ghalleb, product marketing manager for GitGuardian, said the two companies have integrated their respective platforms using open source software that integrates GitGuardian Secrets Detection and CyberArk Conjur Cloud, a software-as-a-service (SaaS) platform for managing and rotating secrets as needed.

    In addition, CyberArk Conjur Cloud is now integrated with HasMySecretLeaked, a tool for discovering if a specific secret has been exposed on GitHub. That capability enables DevSecOps teams to periodically cross-reference secrets and credentials against a private database of secrets known to have been publicly exposed.

    GitGuardian claims to have uncovered more than 20 million publicly exposed secrets on the GitHub repository. While GitGuardian provides tools to discover exposed secrets, organizations rely on the CyberArk platform to manage secrets and remediate issues that arise when they are left exposed.

    The immediate challenge is to find ways to integrate secrets detection within the context of larger ecosystems, said Ghalleb. In the longer term, GitGuardian is working toward embedding its tool into integrated development environments (IDEs) to surface exposed secrets as developers build software, said Ghalleb.

    Naturally, there is a lot more focus on secret detection, and secrets management is getting more attention as more organizations review their software supply chain processes in the wake of a series of high-profile security breaches. For many organizations, however, it’s still early days as far as adopting DevSecOps best practices to secure those software supply chains, but it’s clear more responsibility for application security is shifting left toward developers and the DevOps teams that support them.

    Unfortunately, too many developers still hard-code secrets in plain text into applications to create shortcuts as software is developed. Many forget to remove those secrets before an application is deployed in a production environment. Once an application is deployed in a production environment, it may be months before anyone discovers an issue—if it’s discovered at all.

    In the meantime, cybercriminals are becoming more adept at using scanning tools to discover secrets and then exploiting them to compromise applications after they have been deployed.

    Hopefully, DevOps teams will implement DevSecOps best practices to address those issues before any fines are levied. But the challenge, as always, is ensuring application security without adversely impacting the rate at which software is currently being built.

    It’s only a matter of time before more stringent regulations require organizations to revisit the security of software supply chains. Countries around the world are drafting legislation that would hold organizations much more accountable for the security of the applications they build and deploy. As more fines are eventually levied, the tolerance for leaving secrets exposed in applications is only going to decline.

    Secrets discovery and management is, of course, only one aspect of application security, but the more these issues are addressed before applications are deployed the less stressful cybersecurity becomes.

  • DBmaestro Mitigates DevOps Security Risk with CyberArk

    DBmaestro Customers Gain Solution to Better Secure and Manage Privileged Credentials in Oracle Database Environments

    Houston, Texas, March 15, 2016 – DBmaestro (http://www.dbmaestro.com), the pioneer and leading provider of DevOps for database solutions, today announced a technology integration with the market leading CyberArk Privileged Account Security Solution. This integration helps improve security and compliance in DevOps environments by allowing DBmaestro to secure the powerful privileged access needed across the range of DevOps actions.

    Successful application development is dependent on the efficient management of multiple Oracle database environments including development, integration, internal testing, user acceptance testing, production and disaster recovery. To mitigate security risk, powerful access associated with the privileged credentials used by in-house/custom applications in DevOps environments needs to be effectively managed and secured.

    Privileged credentials are frequently targeted in cyber attacks due to their broad, often unfettered access to an organization’s most sensitive assets and information – including databases and applications. Without this security in place, privileged credentials can be hijacked by attackers, leaving the organization susceptible to significant theft or destruction of data, or even complete network takeover.

    DBmaestro integrates with CyberArk Application Identity Manager, part of the CyberArk Privileged Account Security Solution. This enables DBmaestro TeamWork to automatically retrieve and securely use the target database credentials that are stored in and managed by CyberArk Enterprise Password Vault. Enforcing multi-factor authentication to the CyberArk Vault to retrieve a credential indicates that it is a valid, trusted application requesting and gaining access to their key applications and targets.

    As part of a proactive cyber security program and to address evolving compliance requirements, passwords can be automatically rotated based on the organization’s security policy for both in-house/custom applications running on Oracle, and the DBmaestro TeamWork Oracle solution. CyberArk Application Identity Manager enables automated synchronization of credentials in the background without requiring any code or file changes while reducing downtime and maintenance windows caused by manual credential rotation.

    DBmaestro TeamWork is a secured DevOps for database solution that brings continuous delivery best practices to the database. Offering features and functionality far beyond what’s achievable using manual work or simple compare-and-sync tools, DBmaestro TeamWork will transform development operations, while dramatically increasing productivity and reducing development costs.

    “This integration helps companies successfully manage and secure multiple database environments in order to create applications and drive business results,” said Yariv Tabac, co-founder and CEO of DBmaestro. “By combining security and database change management capabilities, customers can better address critical database security vulnerabilities and their ability to meet audit and compliance requirements.”

    To achieve secure DevOps for Oracle databases, CyberArk Application Identity Manager enables organizations to protect critical business systems by eliminating embedded credentials from application scripts, configuration files and database tables. In addition, implementing both these solutions leads to combining individual accountability with detailed, centralized tracking and reporting on all application privileged account activity, thus enabling organizations to meet diverse sets of compliance requirements.

    “Privileged accounts and credentials, including those that allow applications to access sensitive databases and systems, are targeted by attackers in virtually every cyber attack,” said Adam Bosnian, executive vice president, global business development, CyberArk. “CyberArk reduces the risk of unsecured privileged accounts and credentials use across the enterprise. For developers utilizing solutions like DBmaestro, CyberArk complements existing agile workflows to empower developers to balance security and productivity, while enabling organizations to automate compliance based on their security policies.”

     

    About DBmaestro

    DBmaestro is a pioneer and leading DevOps for database solution provider. Its flagship product, DBmaestro TeamWork, enables Agile development, Continuous Integration and Delivery for the Database.

    TeamWork supports streamlining of development process management and enforcing change policy practices. The solution empowers Agile team collaboration while fostering regulatory compliance and governance. With DBmaestro, organizations can facilitate DevOps for database by executing deployment automation, enhancing and reinforcing security as well as mitigating risk.

    DBmaestro’s solutions are deployed at many major international companies, including Visa, MasterCard, Frost Bank, Bank of the West, Knight Capital, Thomson Holidays, Bank Leumi, Barclays, and others.