devopsy.kinsta.cloud

Tag: Trend Micro

  • Trend Micro Allies With Snyk to Advance DevSecOps

    Trend Micro Allies With Snyk to Advance DevSecOps

    Trend Micro and Snyk unveiled today a software-as-a-service (SaaS) platform the two companies have jointly developed to identify vulnerabilities in open source code.

    The Trend Micro Cloud One – Open Source Security by Snyk platform enables DevOps teams to both identify vulnerabilities and licensing issues to better monitor, prioritize and share information about risk and exposure rates within application development projects.

    Trend Micro COO Kevin Simzer said the SaaS platform provides a unified approach that combines six services within a single subscription to enable organizations to better protect a software supply chain.

    Snyk CTO Geva Solomonovich said that while the relationship between the two companies is not exclusive an alliance with Trend Micro will enable organizations to employ Snyk tools and the open source vulnerability database to implement a set of best DevSecOps practices within their organization.

    Simzer said Trend Micro is also including automation tools that make it easier for cybersecurity teams, along with the rest of the IT organization, to discover what application development projects are underway with their organization. The goal is to provide cybersecurity teams and DevOps teams with a set of tools that provides them with a common language through which they can collaboratively address vulnerabilities.

    Trend Micro claims approximately eight hours can be saved per vulnerability through automation and early discovery of the versions of open source code being employed. Roughly 80% of all application code in use today is derived from open source software, noted Trend Micro. That translates to saving more than 650 hours of development time per application, according to the company.

    Snyk, meanwhile, claimed to have observed a 2.5x increase in the number of open source vulnerabilities it has discovered over the past three years. In the wake of some recent high-profile breaches the security of software supply chains has become a greater area of focus, with many organizations now implementing a more rigorous review of all the code they employ and any associated dependencies.

    It’s still early days as far as adoption of DevSecOps best practices are concerned within most organizations. Responsibility for application security is clearly shifting further left toward developers. As part of that effort, cybersecurity teams are trying to adjust their processes in a way that enables them to vet the efforts of developers without slowing down the rate at which applications are developed. That’s becoming more challenging as the rate at which applications are being developed continues to increase.

    The conundrum organizations are trying to navigate is that every minute a developer spends on security is, theoretically, one less minute they have to write applications or business logic. At the same time, however, if vulnerabilities are not addressed early in the development cycle, they may take longer and cost more to fix, especially if they are discovered after an application is deployed in a production environment.

    Of course, there may come a day a when application security is just another set of steps to be performed within a quality assurance process. In the meantime, however, a lot more attention is being paid to application security today, in part, to make up for the many sins of the past.

  • Trend Micro Blocked 13 Million High-Risk Email Threats in 2019

    Cloud-based email protection saw a rise in BEC, phishing and email-borne malware

    DALLAS, March 10, 2020 – Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today released its 2019 Cloud App Security Roundup report. The report highlights changes in messaging-specific threats detected last year, the use of more sophisticated malware, and the potential abuse of emerging technologies in artificial intelligence to inform future business protection strategies.

    In 2019, Trend Micro blocked 12.7 million high-risk email threats for customers leveraging cloud-based email services from Microsoft and Google. This second layer of defense caught threats beyond those detected by the cloud email services’ built-in security.

    “Organizations are leveraging the power of SaaS-based applications in greater numbers to drive productivity, cost savings and growth. However, in doing so they may be opening themselves up to risk if they only rely on built-in security,” said Wendy Moore, vice president, product marketing at Trend Micro. “As our report shows, built in security is not enough on its own to stop today’s cybercriminals. Businesses must take ownership of cloud protection and find a multi-layered third-party solution to enhance their platform’s native security functionality.”

    More than 11 million of the high-risk emails blocked in 2019 were phishing related, making up 89% of all blocked emails. Of these, Trend Micro detected 35% more credential phishing attempts than in 2018. Additionally, the number of unknown phishing links in such attacks jumped from just 9% of the total to more than 44% in 2019. This may demonstrate that scammers are registering new sites to avoid detection.

    The report also shows that criminals are getting better at tricking the first layer of defense against Business Email Compromise (BEC) attacks, which typically look at attacker behaviors and intention analysis of the email content. The percentage of BEC attacks caught by AI-powered authorship analysis increased from 7% in 2018 to 21% in 2019.

    Emerging phishing techniques outlined in the report include the increasing use of HTTPS and targeting Office 365 administrator accounts. This enables malicious hackers to hijack all connected accounts on the targeted domain and use them to send malware, launch convincing BEC attacks and more. To this end, Trend Micro blocked nearly 400,000 attempted BEC attacks, which is 271% more than in 2018.

    In the face of such threats, Trend Micro recommends the organizations take the following mitigation steps:

    • Move away from a single gateway to a multi-layered cloud app security solution
    • Consider sandbox malware analysis, document exploit detection, and file, email, and web reputation technologies to detect malware hidden in Office 365 and PDF documents
    • Enforce consistent data loss prevention (DLP) policies across cloud email and collaboration apps
    • Choose a security partner that can offer seamless integration into their cloud platforms, preserving user and admin functions
    • Develop comprehensive end user awareness and training programs

    The report’s findings were based on data generated by Trend Micro Cloud App Security™, an API-based solution that protects a range of cloud-based applications and services, including Microsoft® Office 365™ Exchange™ Online, OneDrive® for Business, SharePoint® Online, Gmail, and Google Drive.

    To find out more, please read the complete report here: https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/trend-micro-cloud-app-security-report-2019

    About Trend Micro

    Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information. Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud environments, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and control, enabling better, faster protection. With more than 6,000 employees in over 50 countries and the world’s most advanced global threat intelligence, Trend Micro secures your connected world. For more information, visit www.trendmicro.com.

     

  • Trend Micro Partners With Snyk to Advance DevSecOps

    Trend Micro Partners With Snyk to Advance DevSecOps

    Trend Micro today announced an alliance with Snyk through which alerts about vulnerabilities in open source code will be passed on to the tools Trend Micro makes available to apply virtual patches to both monolithic and microservices-based applications.

    Snyk provides a tool that identifies and fixes vulnerabilities and license violations in open source dependencies and container images. Trend Micro COO Kevin Simzer said his company leverages the alerts generated by Snyk to inform developers and cybersecurity professionals where virtual patches need to be applied.

    Virtual patches are a capability Trend Micro developed to enable IT organizations to address a vulnerability by applying a security policy that limits access to a specific piece of code until a developer can update a monolithic application or replace the containers housing vulnerable code within a set of microservices.

    By working more closely with Snyk, Trend Micro is trying to increase the appeal of its approach to virtual patching among DevSecOps teams, said Simzer. It’s not possible for most developers to address every vulnerability that manifests itself in a timely manner. Virtual patching allows DevSecOps teams to establish which vulnerabilities need to be addressed immediately while making use of virtual patches to protect applications from less severe vulnerabilities until they can be addressed during a DevOps cycle. To advance those capabilities, Simzer noted Trend Micro has already integrated its security offerings with continuous integration/continuous deployment (CI/CD) platforms such as Jenkins.

    Simzer said it will take a while for most cybersecurity professionals to trust developers to address cybersecurity issues during the application development process. However, virtual patches provide a mechanism through which both cultures can collaborate more closely without compromising the rate applications are being built and deployed. The primary reason developers tend not to pay as much attention to cybersecurity issues as everyone would like is because of the deadline pressure most of them are operating under. However, as responsibility for application cybersecurity continues to shift left, more developers are trying to address these issues earlier in the application development process.

    More than 16,000 enterprise IT organizations are already using Trend Micro security offerings to secure both monolithic applications and cloud-native applications based on containers, said Simzer, adding that footprint puts Trend Micro in a position to help organizations embrace best DevSecOps practices.

    Of course, Trend Micro is not the only cybersecurity vendor with similar ambitions. The challenge many organizations will face is defining what processes are best handled by developers invoking application programming interfaces (APIs) versus cybersecurity professionals who are more comfortable employing graphical user interfaces (GUI). There may come a day when more cybersecurity professionals are able to write code, but for now the two camps could not be further apart in terms of the tools they prefer to use. For IT security vendors such as Trend Micro, that means for the foreseeable future, they will continue to need to build GUIs alongside APIs.

    — Mike Vizard

  • Trend Micro Survey Finds Lack of IT Security Input In DevOps Introduces Cyber Risk for 72% of Companies

    Global survey reveals organizations need tools that support DevOps security

     

    DALLAS, October 7, 2019 – Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today announced findings from a survey that reveal organizational silos create unnecessary security risk for global businesses. The lack of security involvement in DevOps projects was reportedly creating cyber risk for 72% of IT leaders.

    In an effort to better understand the DevOps culture, Trend Micro commissioned independent research specialist Vanson Bourne to poll 1,310 IT decision makers in SMB and enterprise organizations across the globe about their organizational culture.

    “It’s no secret that developers and security teams have a history of butting heads,” Steve Quane, executive vice president of network defense and hybrid cloud security for Trend Micro. “We want to help businesses breakdown those barriers by providing technology and solutions that work for developers, IT and security teams. To do that best, we have to understand how the DevOps community and IT security teams collaborate – so we asked them for input directly. Understanding their goals will help us continue to provide solutions that help them do their jobs, and help the end results be secure.”

    DevOps is a bigger priority today than a year ago for 79% of companies, but 34% admitted security teams are not always consulted in project plans. This is despite 94% of respondents stating that they have encountered security risks when implementing projects.

    This challenge is also highlighted in newly published research from ESG1 , also commissioned  by Trend Micro along with other cybersecurity vendors, which states that only 20% of cloud-native application security product purchases for DevOps projects are actually made by IT security teams. To tackle the issue, ESG found that 68% of organizations have, or plan to have, a centralized team to handle DevOps security.

    ESG’s survey found only 30% of orgs include a member of their cybersecurity team from the beginning of their software development process.

    Trend Micro has designed its solutions to help DevOps and security teams operate more seamlessly. Find out how here: https://www.trendmicro.com/en_us/business/products/hybrid-cloud/development-operations.html.

    1Source: ESG Research Survey, Leveraging DevSecOps to Secure Cloud Native Applications, July 2019

    About Trend Micro

    Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information. Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud environments, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and control, enabling better, faster protection. With more than 6,000 employees in over 50 countries and the world’s most advanced global threat intelligence, Trend Micro secures your connected world. For more information, visit www.trendmicro.com.

     

    ###

     

  • DevSecOps Survey Finds Failure to Communicate

    DevSecOps Survey Finds Failure to Communicate

    While it’s generally agreed that shifting more cybersecurity responsibility onto the shoulders of developers is a good idea, a failure to communicate across application development and cybersecurity teams has contributed to little progress in achieving DevSecOps.

    A survey of 1,310 IT decision-makers conducted by the market research firm Vanson Bourne on behalf of Trend Micro finds that while nearly three-quarters of respondents (74%) said integrating developer, IT operations and cybersecurity processes has become more important over the past year, more than one-third (34%) said these silos are making it more difficult to create a DevOps culture in the organization. A full 89% said software development and IT security teams needed to be in closer contact, while 77% said the same for developers, security and operations.

    Greg Young, vice president of cybersecurity for Trend Micro, said the two biggest challenges in achieving DevSecOps historically are the lack of trust between developers and cybersecurity professionals and a lack of tooling to foster collaboration and communication across teams.

    The rift between developers and cybersecurity is well-known: Application developers have been known to give short shrift to cybersecurity guidelines to make a deadline, only to have that application breached in a production environment. However, developers can counter that cybersecurity professionals can slow things down too much, in the name of being overly cautious.

    Young said organizations need to find tools that make it easier for those two teams to establish trust within the context of an integrated DevSecOps process. Rather than just relegating cybersecurity teams to defining policies, cybersecurity professionals need to find a way to provide input during all stages of the application development process without compromising the overall agility of the development team, he said.

    In fact, survey respondents identified fostering greater integration between teams (61%), setting common goals (58%) and sharing learning experiences across teams (50%) as the best ways to achieve DevSecOps. The trouble is, 78% of respondents said their organization needs to improve in all these areas.

    Unfortunately, nearly half of respondents (46%) said they have only partially developed their DevOps strategy, with only a third of respondents (33%) saying DevOps today is a shared responsibility between software development and IT operations.

    Regardless of how organizations achieve DevSecOps, the one certain thing is most organizations have no alternative. The rate at which applications are being developed today generally exceeds the ability of short-handed cybersecurity teams to keep pace. The only way to make sure applications are more secure than they have been historically is to make implementing security controls part of the application quality assurance process. That said, cybersecurity teams most likely will take a “trust, but verify” attitude toward developers to ensure the right controls have been put in place.

    Of course, none of this is going to happen of its own accord. Senior leaders need to make DevSecOps best practices a requirement. Otherwise, DevSecOps will always remain one of those many aspirational IT goals that go unfulfilled.

    — Mike Vizard

  • Trend Micro Demonstrates Strength of Relationship with Amazon Web Services Through Integrated Technology, Channel and Diversity Programs

    DALLAS – November 29, 2018 –Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today demonstrated the strength of its relationship with Amazon Web Services, Inc. (AWS) through integration with technology, the channel and workforce diversity.

    “A strong alignment with AWS has contributed to businesses increasingly choosing Trend Micro to protect hybrid cloud environments,” said Kevin Simzer, chief operating officer, Trend Micro.“We proudly reported a 69 percent year on year growth in our cloud business across all platforms this last quarter, which let us punch through our goal of securing over 3 million hybrid cloud workloads.”

    “Trend Micro is quick to leverage new features in AWS Marketplace to simplify and accelerate secure customer application migrations. Together we have a common vision to innovate the automation of software procurement via AWS Marketplace for Containers,” said Dave McCann, Vice President, AWS Marketplace Service Catalog and Migration Services, Amazon Web Services, Inc. “With over 200,000 active buyers on AWS Marketplace, we’re continuing to focus on making it easier for organizations to find the solutions that can help them innovate on AWS and meet their growing business needs.”

    Trend Micro is an AWS Partner Network (APN) Launch Partner on the following programs launched at AWS re:Invent 2018:

    Technology Programs

    • AWS Container Competency: Trend Micro has achieved AWS Container Competency status. Criteria included having two strong customer references and meeting a strict set of requirements, collectively reinforcing Trend Micro’s leadership role in container security and demonstrating proven success with AWS customers. This is validated by 20 percent of Trend Micro’s enterprise hybrid cloud security customers already securing their containers with the company’s technology.
    • AWS Container Marketplace: AWS announced support for software products built on Docker containers. As an APN Advanced Technology Partner, Trend Micro is extending its solutions in AWS Marketplace with its automated build-time and container image registry scanning. This will detect vulnerabilities and malware prior to deployment, helping customers reduce threats and risk early in the CI/CD pipeline with frictionless security.
    • AWS Security Hub: Trend Micro can now send key security events to the new AWS Security Hub. AWS Security Hub is designed to provide users with a comprehensive view of their high-priority security alerts and compliance status by aggregating, organizing, and prioritizing alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie as well as from other APN security solutions. The findings are then visually summarized on integrated dashboards with actionable graphs and tables. This will allow Trend Micro users to gain a stronger security posture while accomplishing more with less.

    Channel Programs

    • AWS Marketplace Consulting Partner Private Offers: Trend Micro is an APN Launch Partner of a new program that will benefit its channel partners. The program allows an AWS Marketplace customer and an AWS Marketplace ISV to negotiate custom price and end user licensing agreement (EULA) terms for a software purchase. The result will help the channel accelerate cloud migrations and streamline technology procurement and deployment.

    Diversity Programs

    • Trend Micro Gender Diversity Program supported by AWS: Trend Micro expanded its diversity initiative by launching a campaign to reduce the gender gap within the IT and cybersecurity workforce. This Close the Gap initiative is supported by AWS who co-hosted 30 young women of Girls in Tech, who otherwise might not be able to attend re:Invent 2018. Trend Micro sponsored a number of other initiatives including the AWS diversity track reception.

    Since 2012, Trend Micro has been dedicated to safeguarding customers’ cloud environments. This leadership has led  to  a close relationship with AWS, which is confirmed by Trend Micro being an APN Advanced Technology Partner, an AWS Security Competency Partner, an AWS Software-as-a-Service (SaaS) Partner, an AWS Government Competency Partner, and an AWS Marketplace seller.

    To find out more, please visit www.trendmicro.com/aws.

    About Trend Micro

    Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information.  Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud workloads, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and investigation, enabling better, faster protection. With over 6,000 employees in 50 countries and the world’s most advanced global threat research and intelligence, Trend Micro enables organizations to secure their connected world.  For more information, visit www.trendmicro.com.

     

    All product and company names herein may be trademarks of their registered owners.

  • Trend Micro Redefines Endpoint Security with Trend Micro Apex One™

    All-in-one advanced endpoint security solution automates detection & response, delivers insight for stretched IT and security teams

    DALLAS, October 15, 2018 – Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today launched the evolution of its advanced endpoint security offering. Now re-branded as Trend Micro Apex One™, the product redefines endpoint security with the sheer breadth of capabilities delivered as a single agent, with consistency across SaaS and on-premises deployments. This simplified offering enhances automated detection and response and provides actionable insights that maximize security for customers and offers growth opportunities for the channel.

    Overextended IT security teams are increasingly overwhelmed by the number of products required to fully protect their endpoints. Combined with an increasing number of alerts and siloed log information, there is a struggle to respond quickly enough to today’s advanced threats.

    “Our latest release has advancements that address the most pressing endpoint security issues being faced in the industry today,” said Kevin Simzer, chief operating officer for Trend Micro. “Despite the claims of some so-called ‘next-gen’ vendors, effective protection requires multiple layers of security, which is foundational to our strategy. Apex One™ is a fantastic choice for businesses seeking to displace traditional AV or struggling next-gen deployments.”

    Trend Micro Apex One™ delivers three key highlights:

    • Automated Detection & Response:

    Apex One™ is built upon the XGen™ security techniques, which is a cross-generational blend of threat defense functionality that intelligently applies the right technology at the right time. The product includes the industry’s most timely virtual patching capabilities powered by Trend Micro’s Zero Day Initiative, along with a range of modern technologies to detect and block advanced attacks, including fileless threats.

    • Actionable Insights:

    Apex One™ introduces significantly expanded endpoint detection and response (EDR) capabilities. Additionally, it connects to Trend Micro’s managed detection and response (MDR) service option that boosts in-house teams with threat hunting and alert monitoring.

    • All-in-one:

    Apex One™ offers an industry-leading breadth of capabilities from a single agent, while many vendors are still only shipping two or more. In particular, Apex One™ powerful EDR with the automated detection & response tools, simplifying deployment and eliminating silos.

    Together, these key highlights of Trend Micro Apex One™ provide a major growth opportunity for channel partners looking to offer a higher-value product that meets the security needs of enterprises.

    “These days both channel leaders as well as discerning IT decision makers can end up confused due to the level of noise in the cybersecurity market. When it comes to endpoint security I encourage a focus on the proven performance, security improvements, and flexibility of delivery models of each solution in consideration,” said Doug Cahill, senior cybersecurity analyst and group director at ESG. “By offering automated detection and EDR investigation in a single agent that is easy to deploy and provides the right defense at the right time, Trend Micro offers a modern approach to endpoint protection.”

    “Our business is faced with constant security pressures, needing to defend against increasing threats like fileless malware and ransomware while meeting security compliance standards,” said Tim Masey, Director of Cybersecurity, for Carhartt. “Today, Trend Micro provides us with effective advanced endpoint security and we look forward to the expanded capabilities of Apex One™.”

    The product’s single agent form factor, available in November 2018, eases deployment while addressing today’s demanding protection and compliance requirements. Apex One™ furthers Trend Micro’s existing OfficeScan product and current OfficeScan customers will receive Apex One™ as a regular update at no additional cost; certain features such as EDR investigation require additional licensing, depending on current entitlements.

    For more information, please visit: www.trendmicro.com/apexone.

    About Trend Micro

    Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information.  Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud workloads, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and investigation, enabling better, faster protection. With over 6,000 employees in 50 countries and the world’s most advanced global threat research and intelligence, Trend Micro enables organizations to secure their connected world.  For more information, visit www.trendmicro.com.

  • Trend Micro Expands DevSecOps Portfolio

    Trend Micro Expands DevSecOps Portfolio

    At the AWS re:Invent 2017 conference today, Trend Micro significantly expanded its reach into DevSecOps by announcing it has acquired Immunio, a provider of agent software that can be employed on a central platform engine to execute security policies on a granular level.

    In addition, Trend Micro announced it is adding support for container image scanning to its portfolio of security products as well by the spring of 2018.

    Mark Nunnikhoven, vice president of cloud research for Trend Micro, says both the Immunio policy engine and the container image scanning technology are now part of the Trend Micro Hybrid Cloud Security family of offerings that the company plans to expand for developers. Those capabilities, in turn, are exposed to developers deploying applications on-premises or in a public cloud primarily through its Trend Micro Deep Security cloud service, a suite of security technologies and threat detection services exposed by application programming interfaces (APIs).

    Nunnikhoven notes Trend Micro has seen a significant increase over the last several years in the use of programmatic approaches to managing security. Most of the shift has been driven by developers who have driven security to the left as part of the rise of DevSecOps. But he says security professionals are also starting to develop programming skills to advance IT security both in the cloud and on-premises.

    Nunnikhoven says the rise of containers is making DevSecOps more challenging. Too many developers are still grabbing containers from registries without checking them for vulnerabilities. As many as one-third of containers may contain known vulnerabilities, he says. To address that issue, Gartner estimates that by 2019 more than 70 percent of enterprise DevSecOps initiatives will have incorporated automated security vulnerability and configuration scanning for open-source components and commercial packages. That compares to less than 10 percent in 2016.

    IT organizations, however, don’t just want to be able to scan container images. Nunnikhoven says it’s clear they want a set of integrated security tools that can be employed to secure both the containers and the hosts they are deployed on. In the case of Immunio, Trend Micro is adding a security technology that can be embedded in applications running on virtual machines or bare-metal servers, as well as containers making up a microservice.

    While Trend Micro has a long history of providing security products to IT and cybersecurity professionals, it and virtually every other security vendor are competing against a host of startups that have embraced DevSecOps to change how security technologies are consumed. In its effort to remain relevant, Trend Micro is expanding its portfolio of products to focus more on developers. Over time, however, Nunnikhoven expects there will be increased collaboration between developers and IT security professionals, as the lines of responsibility for various aspects of security are better drawn.

    In the meantime, however, Trend Micro—like most of the vendors in the IT security industry—is now clearly making a hard shift to the DevOps left.

    — Mike Vizard

  • Simplify and Streamline Hybrid Cloud with DevOps

    Simplify and Streamline Hybrid Cloud with DevOps

    The cloud is not new. The virtues of the cloud have been proclaimed incessantly for years, and most businesses have embraced cloud servers and services on some level. The realities of data security and the need to leverage existing investments in IT infrastructure, however, generally result in some sort of hybrid cloud setup, with servers and applications that span both local data centers and cloud providers. Hybrid cloud deployments can be complex and volatile, which is where DevOps comes in.

    I wrote a report recently for devopsy.kinsta.cloud that takes a closer look at the pros and cons of hybrid cloud, and the symbiotic relationship with DevOps. “DevOps Enabling the Hybrid Cloud” examines how DevOps tools and practices streamline management of such an environment. It also looks at some of the security implications and how DevOps can address those concerns.

    The report explains, “Speed and flexibility are imperative for organizations that want to remain competitive. Organizations that strive to lead understand that IT must be viewed as a strategic advantage—a powerful tool for driving innovation and creativity. The hybrid cloud provides a bridge from legacy hardware and assets to cutting-edge concepts such as containers and serverless computing for organizations that do it right.”

    One truism addressed in the paper is that customers—whether they’re external customers of your company or the users within the company that rely on IT services and applications—don’t know or care where your applications or data are delivered from. They know that they want stuff to just work when they need it to work. It’s up to IT to determine the most efficient and effective way to achieve that goal, and to provide a seamless, frustration-free experience. Sometimes that means relying on cloud servers and services, and sometimes it means using local infrastructure.

    I spoke with Justin Foster from Trend Micro about the overlap of hybrid cloud and DevOps, and specifically about unique security issues with hybrid cloud environments. He stressed that legacy tools and traditional approaches to security are not sufficient for the more dynamic hybrid cloud environment. As explained in the report, “Security has to be baked in from the beginning and throughout the development life cycle.”

    A pure cloud infrastructure is unlikely for any established company. It may be achieved eventually through attrition, but there’s no getting around the fact that there already are servers and applications in place. The hybrid cloud approach is the right solution in most cases, and DevOps tools and practices are essential to help manage and secure the hybrid cloud effectively.

    Click here to download the report: “DevOps Enabling the Hybrid Cloud.”