When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Acronyms arent unique tocybersecurity, but theyve become a hallmark of how we communicate with each other.
Do we really need to be adding this layer of complexity to an industry which is already complex?
(Image Credit: TheDigitalArtist / Pixabay)
Or are they just making our devs more depressed?
Let’s make security accessible and actionable.
And yet developers often struggle to focus on what matters.
Weve developed something unique in the cybersecurity industry - a language that no-one natively speaks.
Security Researcher & Advocate at Aikido.
But what it actually does is venture to secure our code.
With that knowledge we can then immediately take a stab at understand what dynamic app security testing is.
Its semantics, not guess work.
The latter is like a hacker trying to find vulnerabilities in our applications.)
At the board level, security teams are completely against the wall in terms of funding.
Because they dont understand what things actually do.
You cant walk into the boardroom and ask the CEO to part with some cash for a CNAPP.
The cynic in me also sees a lot of these acronyms as money-printing machines.
And, even when something might be needed, its difficult to separate the necessities from the snake oil.
We have a tendency to secure entire applications or entiresoftwaredevelopment in separate stages.
They are in silos.
Here are the four key areas we need to focus on.
It’s about writing secure code from the start.
Securing our runtime software- This is about protecting ourapplicationwhile it’s running.
Can an attacker find vulnerabilities?
Securing our cloud environments- This means protecting theinfrastructurethat everything runs on.
Securing our supply chain- This covers dependencies, open source components, and third-party elements.
Even if we discard the acronyms, theres still a way to go.
Here’s the reality: acronyms are designed to be understood by a small subset of people.
Yet, we have (at the last count) more than 300 of them.
We need to move from a culture of complexity and exclusivity to one of clarity and inclusivity.
We’ve rated the best endpoint protection software.
The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc.
If you are interested in contributing find out more here:https://www.techradar.com/news/submit-your-story-to-techradar-pro
