Application Security Monitoring

Application Security Monitoring

In order to deliver on the promise of faster and cheaper application delivery, modern development often relies heavily on stringing together open-source components or packages with a minimum amount of custom code. The premise is basically, why re-invent the wheel. Whilst this certainly ensures speed of delivery at lower costs, it often introduces flaws resulting from embedded open-source software that was “trusted” by developers or inadvertently not tested by SAST and/or DAST solutions in use.

Where traditional testing approaches have included open-source packages, these tools have generally reported every vulnerability they detect, whether or not the application actually uses the open-source package or library. In reality though, if the application does not use the open-source package, it cannot be attacked, and the vulnerability, therefore, does not create a legitimate risk. A long list of potentially irrelevant vulnerabilities often causes development to either slow down in order to fix every vulnerability reported or worse, to ignore the security test results and push the application to production, hoping that an exploitable vulnerability won’t get attacked; both scenarios being far from ideal.

Dynatrace, with AI and automation at its very core, provides a safety net that catches package-based vulnerabilities that would previously have been missed. Even when a production instance is potentially instantiated with a different package version than what was tested in QA, Dynatrace’s real-time detection and alerting will once again provide the safety net, catching these vulnerabilities that traditional approaches would have missed.

Dynatrace’s Application Security module includes the Dynatrace AI engine, Davis, which helps developers prioritize security issues while eliminating false positives, allowing businesses to release software quickly and securely.But when in production, detection and alerting may just not be enough as cybercriminals have only one aim, to exploit any vulnerability provided to them. Fortunately Dynatrace Application Security, now automatically detects and blocks attacks in real-time too, all without requiring any additional installation or complex configuration of agents.