devopsy.kinsta.cloud

Tag: Signal Sciences

  • Signal Sciences Releases Industry-First Application Protection Solution for Istio Service Mesh

    Integration expands company’s cloud-native security capabilities; Provides complete layer 7 protection for microservices architecture (MSA) applications

    Las Vegas — December 3, 2019 — Signal Sciences, the fastest growing web application security company in the world, today announced the general availability of the first application protection solution for Istio, the industry-leading open source service mesh for microservices architecture (MSA) applications. Signal Sciences continues to offer the first and only next-gen web application firewall (WAF) and runtime application self-protection (RASP) integration with both Envoy and Istio, protecting today’s modern applications in any cloud.

    Visit Signal Sciences at the AWS re:Invent conference Booth #3707 on December 2-5, 2019, in Las Vegas to learn more. For more information, visit  https://www.signalsciences.com/blog/join-us-at-aws-reinvent-2019/.

    In today’s software-driven world, some high performing companies are deploying new code thousands of times a day, according to DORA’s 2019 Accelerate State of DevOps report. Microservices usage has skyrocketed as these teams look to facilitate shorter development cycles, continuous releases and greater agility. Meanwhile, security management and visibility between services in a cloud-native application has become an increasingly complex task.

    By integrating Signal Sciences at the service mesh, organizations can easily gain visibility into both east-west and north-south traffic, and protect their MSA applications without requiring development teams to implement code changes. Furthermore, Signal Sciences’ attack detection — based on proprietary SmartParse technology — makes highly accurate, instantaneous decisions and does not need the constant tuning or configuration that legacy WAFs require. These integrations drastically simplify the deployment of Signal Sciences on containerized applications in Kubernetes environments and enable organizations to scale their protection easily.

    “Development teams are migrating their monolithic application architectures over to highly distributed, microservices foundations en masse,” said Jonathan DiVincenzo, vice president of product management at Signal Sciences. “While this industry-wide shift enables faster innovation and reduces time-to-market for new applications and features, the increased speed also means security capabilities must keep up rather than slow down engineering teams. Our integrations with Istio and Envoy empower these teams, enabling them to deliver quick value without sacrificing their security or visibility.”

    The Signal Sciences next-gen WAF and RASP technology delivers the only application security solution that works across any architecture and offers the most flexible deployment options. Fast and easy to implement, it protects close to 30,000 cloud-native, legacy, and serverless applications and over a trillion production requests per month. Organizations across all industries deploy Signal Sciences to protect their most important web applications, APIs, and microservices against the full spectrum of threats.

     

     

  • Signal Sciences Announces Integration with Pivotal Container Service

    Integration Allows Pivotal Customers to Leverage Award-Winning Next-Gen WAF and RASP Solution

     Austin, Texas  – October 7, 2019 Signal Sciences, the fastest growing web application security company in the world, today announced its Pivotal Container Service (PKS) integration. The integration ensures that Signal Sciences next-gen WAF and RASP solution interoperates effectively with PKS, and customers can now easily deploy Signal Sciences to protect against web application attacks, such as the OWASP top 10, account takeovers, API misuse, and bad bots.

     Visit Signal Sciences at Pivotal’s SpringOne Platform conference on October 7-10, 2019, in Austin, Texas to learn more. For information about additional Signal Sciences integrations, visit https://www.signalsciences.com/integrations/.

    PKS is a purpose-built container solution to operationalize Kubernetes for multi-cloud organizations. It enables organizations to easily and efficiently deploy, run, and manage Kubernetes in production. Signal Sciences’ support for PKS, in tandem with its longstanding integration with the Pivotal Application Service, gives enterprises granular visibility and insights into the threats that impact any app running on Pivotal Platform, so they can take action immediately.

    “With the significant increase in enterprise adoption of Kubernetes, we are thrilled that cutting-edge security providers, such as Signal Sciences, are investing in our Kubernetes platform,” said Angus MacDonald, general manager of strategic alliances and technical ecosystem for Pivotal. “With this partnership, Pivotal and Signal Sciences will provide customers greater flexibility to implement web application security solutions for their PKS or PAS based applications.”

    “Web application attacks are becoming increasingly common, sophisticated, and threatening. The best way to protect applications against them is to effectively monitor and profile incoming traffic to determine what is legitimate, and block the rest,” said Hala Al-Adwan, vice president of technology at Signal Sciences. “With this new validation, Signal Sciences brings easily deployable, scalable next-gen WAF and RASP to PKS, offering customers peace of mind with full coverage against Layer 7 attacks.”

    Signal Sciences’ next-gen WAF and RASP technology delivers the only application security solution that works across any architecture. Fast and easy to implement, it protects more than 27,000 cloud-native, legacy, and serverless applications and over a trillion production requests per month. Organizations across all industries deploy Signal Sciences to protect their most important web applications, APIs, and microservices against the full spectrum of threats.

    To learn more, read our blog here:

    http://www.signalsciences.com/blog/nextgen-waf-support-for-pivotal-container-service-pks

    Signal Sciences can also be found in the Pivotal Marketplace at  https://pivotal.io/platform/services-marketplace/identity-and-security/signal-sciences.

    About Pivotal Software, Inc.

    Pivotal combines our cloud-native platform, developer tools, and unique methodology to help the world’s largest companies transform the way they build and run their most important software applications. Our technology is used by Global 2000 companies to achieve strategic advantages in software development and IT operations. Learn more at pivotal.io.

     
  • Signal Sciences Looks to DevSecOps to Improve App Security

    Signal Sciences Looks to DevSecOps to Improve App Security

    The time has come to put control over IT security into the hands of the developers who increasingly are being held accountable for it. To make that possible, Signal Sciences has launched a Web Protection Platform (WPP) capable of inspecting traffic in real time across multiple deployment models.

    Intended as a replacement for more traditional web applications firewalls (WAF), WPP redirects any suspicious traffic to a cloud analytics engine without adding any meaningful overhead in terms of overall latency, says Signal Sciences CEO Andrew Peterson.

    What makes WPP unique, he notes, is that it can be deployed in three different modes. When deployed on a local server, no changes to the application code are required. WPP also can be deployed as a reverse proxy in from of a web server. But from a DevSecOps perspective, the most flexible options is to deploy WPP in a runtime application self protection (RASP) mode that allows developers to embed WPP directly into their source code. In the later instance, Peterson says developers can assume security responsibility for their own applications, in keeping with process employed by organizations that have implemented advanced DevOps processes.

    Peterson says WPP not only provides protection against the top 10 most common web applications threats, but it also thwarts distributed denial of service (DDoS) attacks, account takeover and even attacks employing malware embedded in custom business logic.

    Regardless of the delivery model, Peterson says it’s become apparent that legacy WAF are not able to secure modern applications based on containers and microservices, Embedding WPP in application source code enables developers to embed a cybersecurity defense mechanism in each container-based microservice in a way that scales over time.

    As part of its commitment to DevSecOps, Signal Sciences has created 16 pre-built integrations with a range of third-party DevOps tools and security technologies, including Atlassian JIRA software, Datadog, PagerDuty, Slack and Splunk. In addition, DevOps teams can take advantage of an application programming interface (API) that Signal Sciences has developed to integrate WPP with other applications.

    Of course, the whole DevSecOps movement is only in its infancy. Most IT organizations are still struggling with the concept. It’s also not clear how much IT security professionals will be comfortable relinquishing control over application security to developers. However, Signal Sciences claims that 95 percent of its customers have implemented automated blocking, versus only 10 percent to 15 percent of IT organizations that have implemented a WAF.

    Signal Sciences is betting that in much the same way they now exercise more influence over IT operation, developers will play a much larger role in IT security. In fact, as developers are held more accountable for application security, Peterson says many of them will demand to be able to programmatically implement IT security controls. Naturally, there’s no such thing as perfect security. But is the case of application security, DevSecOps may turn out to be our only hope.

    — Mike Vizard