Building open source security into agile application builds. Issue 4 (April 2018)

• Record Type: Journal Article
• Authors: Mackey, Tim
• Is Part Of: Network security. Volume 2018:Issue 4(2018)
• Page Start: 5
• Page End: 8
• Publication Date: 2018-04
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(18)30032-1
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : Open source software offers many benefits, not least of which is the way that readily available software components and libraries can speed development. By not having to constantly reinvent the wheel, developers are able to adopt agile development methods that are adaptive, responsive – and fast. But there's also a risk involved. Using open source software offers many benefits and can speed development. But there are risks involved. Changes to applications are being made so quickly and so often that it is difficult to understand and review them for risk. And application development and security practices often appear to be at odds. To employ open source components safely, organisations need visibility into which components they're using. Tim Mackey of Black Duck by Synopsys examines how DevOps teams can utilise automated software composition analysis (SCA).