Couchbase announced a broad range of enhancements to its Database-as-a-Service Couchbase Capella™.
While nearly 75 percent of developers worry about the security of their applications, and 85 percent rank security as very important in the coding and development process, nearly half of their teams lack a dedicated security expert.
These are among the findings of a recent survey of 103 industry professionals at DeveloperWeek Austin in November, 2019.
The survey also found that while 57 percent of participants feel their teams have the right application security tools in place to incorporate security into the software development lifecycle (SDLC), 14 percent do not feel that they've been given the proper solutions to do so, and one-third weren't sure what their company provided. For those respondents who do utilize application security tools, 33 percent scan for vulnerabilities daily, 29 percent weekly and 20 percent monthly; this means that 82 percent scan their applications monthly at a minimum. The remaining 18 percent scanned either quarterly, annually or at random.
Surprisingly, 43 percent of respondents still focus on meeting their application release deadlines over security, which echoes an ongoing issue in the development community. Often, pressures to deliver a functional application by these dates cause coders to take security shortcuts or disregard it altogether. However, a promising 57 percent are realizing that application security should be a key part of the SDLC — and are prioritizing security practices over these demanding deadlines.
Regardless, more than half (52 percent) of participants have experienced burnout as a result of the intense pressures to deliver the applications on time — and securely. When employees are burnt out, their performance can lag, impacting their personal life, professional growth and their company's deliverables.
What this research shows is that, while developers' concerns about securing their code are on an upward trajectory, it's clear the industry has a long way to go. Developers are on the front lines when it comes to protecting their organizations from cyberattacks, and they need the right tools and training to handle this burden. With applications being increasingly targeted by digital adversaries, it is vital that organizations and developers incorporate standard security protocols within DevOps, a practice known as DevSecOps. This should include regular cybersecurity training, an application security team lead and a holistic application security platform that can identify vulnerabilities in development, deployment and beyond.
Interestingly, despite this advice, 70 percent of developers have not received security certifications in their current or prior roles, and only 30 percent have. Developer respondents also provided insight into the skills needed in the field. While coding and security chops are important, soft skills are becoming more highly valued than ever when hiring new talent. Turns out, it's all about the wider group and shared responsibility. Forty-nine percent of developers say teamwork and interpersonal skills are most essential, with problem solving following in second place at 34 percent. Fourteen percent ranked communications and writing as most important, while leadership was ranked least important.
We are seeing strides in development and application security practices following this study. While there are still some concerns and areas for improvement, we are excited that developers are taking significant notice of this long deprioritized issue and taking steps to keep up with today's cyber risks.
Industry News
Remote.It release of Docker Network Jumpbox to enable zero trust container access for Remote.It users.
Platformatic launched a suite of new enterprise-grade products that can be self-hosted on-prem, in a private cloud, or on Platformatic’s managed cloud service:
Parasoft announced the release of C/C++test 2023.1 with complete support of MISRA C 2023 and MISRA C 2012 with Amendment 4.
Rezilion announced the release of its new Smart Fix feature in the Rezilion platform, which offers critical guidance so users can understand the most strategic, not just the most recent, upgrade to fix vulnerable components.
Zesty has partnered with skyPurple Cloud, the public cloud operations specialists for enterprises.
With Zesty, skyPurple Cloud's customers have already reduced their average monthly EC2 Linux On-Demand costs by 44% on AWS.
Red Hat announced Red Hat Trusted Software Supply Chain, a solution that enhances resilience to software supply chain vulnerabilities.
Mirantis announced Lens Control Center, to enable large businesses to centrally manage Lens Pro deployments by standardizing configurations, consolidating billing, and enabling control over outbound network connections for greater security.
Red Hat announced new capabilities for Red Hat OpenShift AI.
Pipedrive announced the launch of Developer Hub, a centralized online app development platform for technology partners and developers.
Delinea announced the latest version of Cloud Suite, part of its Server PAM solution, which provides privileged access to and authorization for servers.
Red Hat announced Red Hat Service Interconnect, simplifying application connectivity and security across platforms, clusters and clouds.
Teleport announced Teleport 13, the latest version of its Teleport Access Platform to enhance security and reduce operational overhead for DevOps teams responsible for securing cloud infrastructure.
Kasten by Veeam announced the release of its new Kasten K10 V6.0 Kubernetes data protection platform.
Red Hat announced Red Hat Developer Hub, an enterprise-grade, unified and open portal designed to streamline the development process through a supported and opinionated framework.