I-Adaion inciphisa umzamo wokubeka phambili umngcipheko kwaye ithintela uhlaselo lwe-malware olungenazo iintsuku

Into yokuphonononga

Malunga no-Adaion

I-Adaion liqonga le-cloud elisebenzisanayo elisebenzisa ubukrelekrele bokwenziwa (AI) ukuphucula ukusetyenziswa kwedatha kubaqhubi begridi yamandla, linceda ekuhlalutyeni nasekuphuhlisenicisIinkqubo zokwenza i-ion. Yasekwa ngo-2021 ziingcali kwisayensi yedatha kunye neegridi zombane, i-Adaion igxile ekudaleni izisombululo zegridi ezikrelekrele nezizinzileyo. Iqela labo liquka iingcali ezisebenzisa ubuchwepheshe obuphambili ukukhokela iinkampani ekutshintsheni amandla ngempumelelo.

 

Iqonga lika-Adaion liphatha idatha ebalulekileyo kubaqhubi begridi, okwenza ukhuseleko lwe-intanethi lube lubalulekile ekukhuseleni ulwazi oluyimfihlo, ukugcina ingqibelelo yokusebenza kwegridi, kunye nokuthintela ukuphazamiseka kwizisongelo ze-intanethi. Ngokusebenzisa i-AI kwigridi yamandla, i-Adaion inyusa ixabiso ledatha ekhoyo, inceda abaqhubi begridi ukuba balungiselele kwangaphambili.cisuhlalutyo lwe-e kunye nolwazi oluchanekileyocisukwenza ii-ion.

Umngeni

I-Adaion ijongene nemingeni ebalulekileyo ekuqinisekiseni ukhuseleko lomjikelo wophuhliso lwesoftware yayo (SDLCIinkxalabo eziphambili yayizi:

Ukuvuza okunokwenzeka kwedatha eyimfihlo.
Ubuthathaka bokhuseleko ngokubanzi kwinkqubo yophuhliso
.

Iimveliso zabo zibhalwe ngePython, kwaye basebenzisa iAzure DevOps njengezixhobo zabo. CI/CD Njengoko imveliso yabo yayikhula, beqinisekisa SDLC inyuse yaba yinto ephambili. I-Adaion yayifuna isisombululo sokubona i-malware kwimithombo evulekileyo, ukuqinisekisa ukuba akukho mfihlo zipapashwe kwikhowudi yomthombo, kunye nokubonakala kwimithombo yazo. CI/CD iziseko zophuhliso ukuchonga nokunciphisa ubuthathaka obunokubakho bokucwangciswa.

Bekufuneka siqinisekise ukuba iqela lethu kunye nenkqubo yethu ziyakwazi ukusingatha yonke imiba yokhuseleko ngokufanelekileyo ngaphandle kokulibazisa imisebenzi yethu

U-Óscar J. García Pérez
CISO ka-Adaion

the Solution

Emva kokuvavanya iindlela ezahlukeneyo, i-Adaion ikhethe i-Xygeni ngenxa yokugubungela kwayo ukhuseleko olupheleleyo kunye nokukwazi kwayo ukuhlanganisa ngaphandle komthungo. I-Xygeni ibonelele ngokubonakala nolawulo olufunekayo phezu kwayo SDLC, idityaniswe kakuhle ne-Adaion's CI/CD pipelineOlu manyano luvumele oku kulandelayo:

Ukufunyanwa kweMalware ngexesha lokwenyani: I-Xygeni ivumele ukufunyanwa kwe-malware ngexesha langempela kwiindlela ezivulelekileyo zokubonelela ngezixhobo, inika ukhuseleko oluqinileyo kwiihlaselo ze-malware zeentsuku ezingenanto.

Uvavanyo oluQhubekekayo lweZiseko zoPhuhliso: I-Xygeni iqhubeka nokuhlola CI/CD iziseko zophuhliso lobuthathaka bokucwangciswa, ukunceda ekuchongeni nasekunciphiseni iingozi ngokukhawuleza.

Ukuthintela Ukupapashwa Kweemfihlo: I-Xygeni iqinisekisile ukuba akukho zimfihlo zipapashwayo kwikhowudi yomthombo okanye nakweyiphi na enye ifayile, igcina ubumfihlo kunye nokuthembeka kolwazi oluyimfihlo.

Inkqubo yokusetyenziswa yayilula kwaye yayingenangxaki kangako. Ukongeza i-Xygeni scanner kwisixhobo sabo esikhoyo pipelines ivumele i-Adaion ukuba yonyuse inani lezicelo kunye neendawo zokugcina ezihlalutywa kancinci kancinci. Olu setyenziso olucwangcisiweyo lusekelwe kubuchule bazo kunye nezinto eziza kuqala, ukuqinisekisa utshintsho oluhamba kakuhle kunye neenzuzo ezikhawulezileyo ngaphandle kokuphazamisa indlela abasebenza ngayo.

Iimveliso zeNkxaso yeXygeni

Nangona i-Adaion ivavanye zonke iimveliso ze-Xygeni, yandisa ukugubungela uhlalutyo kunye nokuchongwa kweengxaki, ugxininiso kunye neenzuzo eziqinisekisiweyo ngexesha le-PoC zigxile koku kulandelayo:

ASPM

Ukubonelela ngepaneli enye yohlalutyo kunye nokubekwa phambili kweglasi ukuqinisekisa ukugxila okuphezulu kunye nempembelelo yemisebenzi yokulungisa kukhuseleko lwehlabathi lwesicelo ngaphandle kokwandisa imizamo yeqela lokhuseleko.

Open Source Security

Ukuqinisekiswa kwemfihlo akukho nto ifihliweyo nakweyiphi na inxalenye yesicelo sangoku kunye nokuqinisekisa ulawulo lokuvuza kwanangaphambi kokuba commitngena kwi SCM

Ukhuseleko Lweemfihlo

ukuqinisekiswa kokuba akukho zimfihlo kwavezwa nakweyiphi na inxalenye yesicelo sangoku kunye nokuqinisekisa ulawulo lokuvuza kwanangaphambi kokuba commitngena kwi SCM.

Iziphumo

Ukususela oko kwaqaliswa iXygeni, Adaion iye yabona uphuculo olukhulu kwiinkqubo zayo zokhuseleko. Iimpawu eziphambili zeXygeni zibe negalelo elikhulu kolu tshintsho:
Ukubeka Izinto Eziphambili Kwenziwe Kwalula
I-Xygeni ihambisa imeko yoKhuseleko ka-Adaion

Ukubonakala Okupheleleyo kunye noKhuselo loHlaselo lweMalware lwe-Zero-Day

I-Xygeni incede i-Adaion ukuba iphumelele uphuculo olukhulu kwiinkqubo zayo zokhuseleko. Ixabiso elongezelelweyo eliphambili kukubonakala ngokupheleleyo kokuxhomekeka kwayo kwimithombo evulekileyo, ubuthathaka bayo, kunye nokukhuselwa kuhlaselo lwe-malware olungenasuku. I-Xygeni ibonelela ngokufikelela ngokulula kuzo zonke ii-dependences ezithe ngqo neziguqukayo, okwenza kube yimfuneko ukuchonga abo bachaphazeleka bubuthathaka kunye neminye imingcipheko ngokukhawuleza. Ngokuhlalutya inguqulelo nganye esandul’ ukupapashwa kunye nokwazisa i-Adaion ukuba ikhowudi ekrokrisayo ifunyenwe, i-Xygeni yongeza umaleko owongezelelweyo wokhuseleko ngokuthintela ukusetyenziswa kwayo ngokuzenzekelayo. CI/CD iinkqubo.

Inkqubo Yokubeka Izinto Eziphambili Ngendlela Esebenzayo

Inkqubo yokubeka izinto phambili iye yasebenza kakuhle kakhulu, isindisa iiyure ezininzi zomsebenzi wezandla. Isekelwe kwi-funnel eguquguqukayo enezigaba ezinokuchazwa ngokweenkqubo zoshishino kunye nemigangatho. Ukongeza ekubaleni ngokuzenzekelayo komxholo ngamnye wobuthathaka, i-Adaion inokongeza iikhrayitheriya zayo zokubeka izinto phambili.

Uvavanyo oluQhubekekayo kunye noLuhlu lweeAsethi

I-Adaion ngoku inokufikelela okubonakalayo nokukhawulezileyo kwi-inventory ehlaziywa ngokuzenzekelayo nangokuqhubekayo nazo zonke izinto zophuhliso kunye neenkqubo zokuhambisa. Ngokujonga nje, banokubona zonke iindawo zokugcina izinto, amathala eencwadi, ukwenziwa kwezinto ngokuzenzekelayo, kunye nezixhobo zelifu kunye nendlela ezinxibelelana ngayo. Olu vavanyo luqhubekayo luvumela ukuchongwa kwangoko kweendawo ezinobungozi obukhulu, lusindisa iqela lokhuseleko iiyure ezininzi ekufumaneni nasekuhlalutyeni, kwaye lubavumela ukuba bagxile ngqo kwizicwangciso zokubeka phambili kunye nokulungisa izinto.

Uxolo Lwengqondo Nokhuseleko Lweemfihlo

Okokugqibela, i-Adaion inoxolo lwengqondo kunye nokuzithemba ukuba iimfihlo zeenkqubo zabo zeziseko zophuhliso zikhuselwe ngokugqibeleleyo, nto leyo egcina ixesha lokungasebenzi kwaye ikhuseleke kwakhona ukuba kwenzeka ukuvuza okunjalo.

Ukusebenzisa iXygeni kutshintshe indlela esisebenza ngayo kukhuseleko. Ukubonakala kokuxhomekeka kwethu kwi-open-source supply chain kunye nokuchonga ubuthathaka ngexesha langempela kube yinto exabisekileyo. Ukulula kokuhlanganiswa kunye nokusebenza kakuhle kwenkqubo yokubeka phambili izinto kusisindise iiyure ezininzi. Uhlalutyo lwe-Xygeni olusebenzayo kunye nokwazisa ikhowudi engathandabuzekiyo kusinika uxolo lwengqondo, okuqinisekisa ukuba CI/CD iinkqubo zikhuselekile. Ndiyincoma kakhulu iXygeni kuyo nayiphi na intlangano efuna ukuxhasa SDLC khu seleko.

U-Óscar J. García Pérez
CISO ka-Adaion

Khusela uPhuhliso lweSoftware yakho kunye nokuHanjiswa kwayo

kunye noKhuseleko lweXygeni