IT PARK
    Most Popular

    Are 5G towers harmful?

    Jun 24, 2025

    6 Ways the Internet of Things Can Improve the Lives of Animals

    May 30, 2025

    Berlin showcases smart city innovations

    Jun 03, 2025

    IT PARK IT PARK

    • Home
    • Encyclopedia

      What is a port?

      Jul 01, 2025

      What to do with a laptop blue screen

      Jun 30, 2025

      Is it better to save the file as a zip archive or as the original file?

      Jun 29, 2025

      What is cross-site scripting attack

      Jun 28, 2025

      The difference between SLR and digital cameras

      Jun 27, 2025
    • AI

      Can AI Painting Replace Human Painters

      Jul 01, 2025

      Who owns the copyright of the paintings created by AI for you?

      Jun 30, 2025

      How does the meta universe "feed" artificial intelligence models?

      Jun 29, 2025

      Amazon Bedrock: How to Stay Competitive in Generative AI

      Jun 28, 2025

      AGI Avengers! Google Brain and DeepMind officially announced a merger

      Jun 27, 2025
    • Big Data

      Transforming the construction industry through digital twin modeling

      Jul 01, 2025

      How does big data start? From small data to big data

      Jun 30, 2025

      What is big data? What can big data do?

      Jun 29, 2025

      Benefits of big data analysis and how to analyze big data

      Jun 28, 2025

      Six benefits of big data for enterprises

      Jun 27, 2025
    • CLO

      Essential factors to consider for a successful cloud transformation journey

      Jul 01, 2025

      Building a Smart City: The Importance of Cloud Storage

      Jun 30, 2025

      SaaS sprawl: meaning, hazard, status quo and mitigation plan

      Jun 29, 2025

      What are the advantages and disadvantages of hybrid cloud?

      Jun 28, 2025

      Cloud computing has many applications in our daily life, what are the main ones?

      Jun 27, 2025
    • IoT

      6 Ways the Internet of Things is Transforming Agriculture

      Jul 01, 2025

      4 Big Challenges for IoT Data Collection and Management

      Jun 30, 2025

      Most enterprises expect a return on investment within one year of IoT deployment

      Jun 29, 2025

      What are the main applications of IoT in our real life?

      Jun 28, 2025

      IoT systems and why they are so important

      Jun 27, 2025
    • Blockchain

      Blockchain Common Consensus Mechanisms

      Jul 01, 2025

      How energy company Powerledger (POWR) is using blockchain to improve the world

      Jun 30, 2025

      Ten application scenarios for blockchain

      Jun 29, 2025

      What is a privacy coin? What is the difference between them and Bitcoin?

      Jun 28, 2025

      The difference between Bitcoin cash and Bitcoin

      Jun 27, 2025
    IT PARK
    Home » CLO » Ten Ways Cloud-Native Development is Changing Cybersecurity
    CLO

    Ten Ways Cloud-Native Development is Changing Cybersecurity

    The "everything-is-code" approach to cloud-native infrastructure makes it easier to set up telemetry where it was previously impossible, as long as security professionals can adapt to the fact that legacy network monitoring mechanisms may no longer work for them.
    Updated: May 17, 2025
    Ten Ways Cloud-Native Development is Changing Cybersecurity

    The cloud-native development model offers the opportunity to realize the benefits of application security that cybersecurity advocates have been championing for more than a decade, but the transition to cloud-native security requires new tools and applications and a different mindset for security operations that will take many cybersecurity professionals out of their comfort zone.

    Here are some insights from developers, application security experts and cloud-native technologists on how cloud-native cybersecurity differs from traditional approaches.

        Everything as Code Makes Application Security Critical

    In cloud-native architectures, microservices and API-led interactions exist not only between application components but also between the underlying infrastructure, meaning everything becomes an application security issue, said Scott Piper, principal security researcher at Wiz, an Israeli cloud-native security provider.

        Larger cyber attack surface

    Kristen Bell, director of application security engineering at GuidePoint Security, said that with the increase in microservices and APIs, data flows have become more complex. There is more integration between applications and systems, all of which leads to a larger cyber attack surface and more complexity to consider from a security perspective. Combined with these changes, we are seeing more and more new privacy laws requiring the geolocation of data.

        New architectures require new specialized security tools

    While there are traditional application security scanning tools such as static application security testing, dynamic application security testing and software portfolio analysis that are still applicable to cloud-native environments, developers and cybersecurity teams now need a plethora of new features and niche security products, said Rebecca Deck, principal application security engineer at Avalara.

        On-premise security tools can come at a significant cost

    Deck also warns that while traditional tools can still play an important role in cloud-native security, development and security teams must understand how they are architected and what it takes to run them. If they are not on-premise tools designed for a cloud-first containerized model, it can be costly to run them in those environments.

        Change is constant

    The dynamic and ephemeral nature of cloud-native infrastructure and development models means that change is the only constant.

    This constant state of change in the environment presents a huge challenge for security professionals tasked with maintaining a consistent security posture, said Juan Orlandini, chief technology officer for North America at Insight Enterprises. Because cloud-native environments are dynamically orchestrated, he said, "there are constant changes, including scaling up and down and upgrading software."

        Threat Modeling Imperative

    Orlandini of Insight Enterprises said threat modeling is becoming an increasingly important part of managing software risk given the expanding cyber attack surface and the dynamic conditions of cloud-native environments. Tools need to evolve to support threat modeling as a core component of cloud-native security," he explained. This means providing tools to identify potential vulnerabilities and attack surfaces and automate assessments to identify misconfigurations and other issues."

        Developer-Centric Security Tools Become Critical

    Keeping up with the speed and flexibility of development workflows means manual reviews and handoffs are no longer as effective, says Jeff Talon, director of software delivery at Liberty Mutual. Security needs to be streamlined in the development workflow, he says, and security teams must find a way to create developer-centric tools and processes to review code and maintain security status.

        Security should strive for standardization

    The emerging state of cloud-native environments breeds a "Wild West" atmosphere that can pose serious challenges to rule-oriented security personnel. Security teams can help developers modernize cloud computing by proposing standards and security-focused guidelines.

        Security-as-code helps application security keep pace with cloud-native

    Talon said automating requirements through policy-as-code in a developer-centric tool is the ultimate goal of cloud-native security. Security requirements are automated through the use of policy-as-code in the continuous integration/continuous deployment pipeline and cloud runtime, providing a consistent development experience and ensuring security and compliance requirements are met throughout the development process," he said. With this, developers can get security feedback earlier in the process and in an environment that enables them to self-correct and move on."

        Continuous monitoring made easier

    Orlandini said the best approach to cloud-native security will include continuous monitoring, which may differ from traditional application security approaches that focus more on periodic scanning than real-time monitoring.

    The good news is that the "everything-is-code" approach to cloud-native infrastructure makes it easier to set up telemetry where it wasn't previously possible, as long as security professionals can adapt to the fact that legacy network monitoring mechanisms may no longer work for them.

    Security Cloud Native Networking
    Previous Article Six benefits of big data for enterprises
    Next Article Building a Smart City: The Importance of Cloud Storage

    Related Articles

    Big Data

    3 Ways to Successfully Manage and Protect Your Data

    Jun 10, 2025
    Encyclopedia

    Who is more secure, fingerprint recognition or password?

    Jun 06, 2025
    CLO

    Last-generation firewalls won't meet cloud demands

    May 21, 2025
    Most Popular

    Are 5G towers harmful?

    Jun 24, 2025

    6 Ways the Internet of Things Can Improve the Lives of Animals

    May 30, 2025

    Berlin showcases smart city innovations

    Jun 03, 2025
    Copyright © 2025 itheroe.com. All rights reserved. User Agreement | Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.