Masanin Ma'aikatar Gina Tafiya ta Bishiyoyi Fasaha
CTO & wanda ya kafa kamfanin Xygeni
Daraktan Gudanarwa na Kamfanin JPMorgan Chase & Co. Derek Fisher
Bari mu zurfafa cikin juyin halittar hare-haren malware: har zuwa kashi 90% na lambar aikace-aikacen zamani ta ƙunshi abubuwan da ke buɗe tushen bayanai. Wannan karɓuwa ta yaɗu tana ba da fa'idodi da yawa, kamar ingancin farashi, ƙirƙira, da sassauci. Duk da haka, tana kuma haifar da manyan haɗarin tsaro na yanar gizo kuma tana barin ƙofa a buɗe ga hare-haren malware. Rahotanni na baya-bayan nan sun nuna ƙaruwar hare-haren malware da kashi 633% wanda ke kai hari ga OSS a 2022, tare da ƙarin ƙaruwar kashi 245% a 2023.
Illolin waɗannan hare-haren suna da tsanani. Misali, lamarin da ya faru kwanan nan shine Ƙofar baya ta XZ, wanda ya fallasa manyan raunin da ke tattare da shi kuma ya nuna haɗarin dogaro da manhajar buɗe tushen da ƙananan ƙungiyoyi ko daidaikun mutane ke kula da ita.
Karuwar aukuwar hare-haren ransomware, inda kashi 67% na ƙungiyoyi ke fuskantar hare-haren ransomware a shekarar 2023, ta ƙara jaddada muhimmancin magance waɗannan barazanar. Shirin SafeDev na yau yana da nufin haskaka waɗannan muhimman batutuwa, yana mai jaddada buƙatar dabarun kariya don kare hanyoyin samar da software ɗinmu. Ku kalla yanzu!
Duk da muhimmiyar rawar da OSS ke takawa, haɗakar ta cike take da ƙalubalen tsaro. Rahotanni na baya-bayan nan sun nuna ƙaruwar hare-haren malware da ke kai hari ga OSS, inda abubuwan da suka faru suka ƙaru da kashi 633% a shekarar 2022 kuma suna ci gaba da ƙaruwa da kashi 245% a shekarar 2023. Matakan tsaro na gargajiya, waɗanda suka dogara sosai kan gano raunin da aka sani ta hanyar Rashin Lafiya da Bayyanawa na gama gari (CVEs), ba su isa ba. Waɗannan matakan galibi sun haɗa da jinkiri a cikin rahoton raunin, iyakancewar ɗaukar hoto, da rashin iya gano barazanar zamani da ba ta daɗe ba...
Application Security Posture Management (ASPM) yana samun karɓuwa kowace rana. Duk da haka, takamaiman ayyukansa bazai bayyana ga kowa ba. Tabbatar da wurinka yanzu! Shiga cikin tattaunawar SafeDev ɗinmu "Shin kuna buƙatar ASPM a rayuwarka?" tare da kwararru kan harkar tsaro ta yanar gizo James Berthoty, William Palm da Jesus Cuadrado don binciko yuwuwar ASPM a matsayin mafita ta tsaro ta aikace-aikace gabaɗaya kuma ci gaba da ƙarfafa ƙungiyar ku!
