[ad_1]
Venafi launched its new Cease Unauthorized Code Answer, designed to assist safety groups proactively stop unauthorized code throughout any working setting.
By leveraging the mixed energy of Venafi’s CodeSign Shield product, trusted workforce of safety specialists and expansive know-how ecosystem, the end-to-end resolution permits organizations to considerably scale back their assault floor, stop potential malware and cyber assaults, and decrease safety breaches by improved utility management.
“Fashionable software program growth usually brings more and more advanced safety threats, with unauthorized code and malicious software program rising as a popular assault vector for cybercriminals immediately. In actual fact, in a latest Venafi analysis research, 70% of safety leaders reported that software program provide chain assaults are their greatest safety blind spot,” mentioned Shivajee Samdarshi, CPO at Venafi. “Unauthorized code can introduce vital safety threat into any group, with main enterprise implications. Venafi’s industry-first Cease Unauthorized Code Answer helps safety groups sort out this rising problem by stopping unauthorized code in its tracks, successfully hardening methods and networks.”
The built-in, end-to-end resolution permits safety groups and directors to take care of their code signing belief chain throughout all environments – from trendy, cloud native environments reminiscent of Kubernetes to environments reminiscent of Home windows, Linux, Apple and Android. It provides groups strict management over code use and execution by verifying that software program originates from an authorised supply and has not been altered. Coupled with stringent execution coverage controls, the answer permits solely approved code to run and blocks any unauthorized code all through the enterprise.
Venafi’s Cease Unauthorized Code Answer options:
Safe code signing course of – Safety groups can automate and safe the whole code signing lifecycle whereas additionally decreasing the burden on growth groups. Code is signed utilizing non-public digital certificates or these issued by trusted Certificates Authorities.
Dynamic certificate-based utility management – A dynamic, certificate-based method to utility management minimizes the burden on safety groups whereas bettering compliance and safety. Groups have final flexibility to take care of this checklist by their working system or present safety options – reminiscent of endpoint safety platforms or intrusion prevention methods – which have built-in capabilities to handle certificate-based allowlists.
Certificates verification – Earlier than code can execute, the group’s safety resolution is configured to examine the digital signature towards trusted code signing certificates. The built-in resolution permits solely genuine and unaltered software program to be executed.
Unauthorized Code Blocking – To stop unauthorized software program from working, the answer blocks code if it doesn’t use legitimate, trusted code signing certificates or if it’s not on the checklist of authorised certificates.
Optimization and integration providers – Complete, ongoing assist and steerage from Venafi’s trusted workforce of safety specialists helps prospects tailor the answer to particularly meet their group’s wants. This contains configuring and optimizing third-party know-how integrations with a corporation’s present safety distributors and workflows.
“As a part of Ferguson’s ongoing efforts to construct and enhance our DevSecOps instruments and automation, we’re starting an initiative with Venafi to accomplice on integration of its Cease Unauthorized Code Answer for its end-to-end capabilities for Kubernetes container signing, signature verification, coverage configuration and enforcement, and runtime verification to forestall the execution of unsigned or tampered photos,” mentioned Shawn Irving, CISO and VP of infrastructure & safety at Ferguson.
“As a long-time buyer of Venafi for TLS Shield and SSH Shield at a number of firms, I’m assured that this addition to our portfolio of safety capabilities will complement our present investments and assist us to leap ahead in combating software program provide chain threats with continued machine identification administration,” added Irving.
The brand new Venafi Cease Unauthorized Code Answer is out there now.
[ad_2]
