Imboni yezokunakekelwa kwempilo ingaphambi kwesikhathi sayo ekunqumeni izinga lokuba sengozini kwesoftware

I-Veracode, umhlinzeki ohamba phambili womhlaba wonke wezixazululo zokuhlola ukuphepha kwezinhlelo zokusebenza, namuhla wembula ukuthi imboni yezokunakekelwa kwempilo ihamba phambili ngokwezilinganiso zobungozi bokuphepha kwesoftware, okuhloswe ngayo ku-27%. Umkhakha udlule izinsiza zezezimali ngokusebenza okuphezulu, okukhombisa ukuthi abahlinzeki bezempilo benze inqubekelaphambili enhle ekukhuliseni ukuphepha kwesoftware yabo ngonyaka odlule.

Imininingwane yashicilelwa embikweni waminyaka yonke we-State of Software Security (SoSS) v12, umphumela wokuhlaziywa kweskena esiyizigidi ezingama-20 kuzo zonke izinhlelo zokusebenza eziyingxenye yesigidi kuzo zonke izidingo zezempilo, ezezimali, ezobuchwepheshe, ezokukhiqiza, ezokusabalalisa kanye nohulumeni.

UChris Eng, oyiNhloko yocwaningo kwaVeracode, uthe: “Ezempilo zingomunye wemikhakha elawulwa kakhulu futhi ithathwa njengengqalasizinda ebucayi nguhulumeni. Ngakho-ke kuyakhuthaza ukubona lokhu kuziphatha okuhle uma kuqhathaniswa nokulungiswa kobungozi okuvamile. Sithemba ukuthi abathuthukisi kanye nabasebenzi be-IT embonini yezokunakekelwa kwezempilo bakubona njengento eyamukelekayo emhlabeni wokuphepha kwesofthiwe, okuvamise ukungakhuthazi kakhulu. Usekhona umsebenzi okufanele wenziwe, ngakho-ke sibheke phambili ekuthuthukisweni okuqhubekayo eminyakeni ezayo ”.

Ngaphandle kwendawo yokuqala ezuziwe ngenxa yamaphesenti angashintshi okuba sengozini, ama-77% ezicelo emkhakheni wezokunakekelwa kwempilo angaphansi kwalezi zinkinga, nezinga elibucayi kuma-21% ezimweni. Umkhakha futhi unendawo eyanele yokwenza ngcono ngokuya kwesikhathi esichithwe kulungiswa ubungozi ngemuva kokutholwa kwabo, ngezinsuku ezimangalisayo ezingama-447 ukufinyelela endaweni emaphakathi yokulungisa.

Izindleko ezihambisana nokuphulwa komkhakha wezempilo ziphezulu kakhulu

Njengoba izinkampani zokunakekelwa kwezempilo zibhekene nezindleko eziphakeme kakhulu ezimaphakathi ngokwephulwa ngakunye, okufinyelele irekhodi elisha lama-US $ 10,1 wezigidi *, kubalulekile ukuthatha izinyathelo ezisheshayo zokunciphisa ubungozi bokuhlaselwa ku-inthanethi. Njengoba ukwephulwa kwedatha ezimbonini ezilawulwa kakhulu kuvame ukuhlotshaniswa nezindleko eziphakeme zesikhathi eside, ezinqwabelana ngokuhamba kweminyaka, le ngxenye ingase izuze nakakhulu emizamweni emikhulu ehlanganisiwe yokubhekana nokuvikeleka zisuka nje.

Phakathi kwemikhakha eyisi-6 ehlaziywe, umkhakha wezokunakekelwa kwezempilo ungowokugcina ngokwengxenye yezicelo ezinobuthakathaka banoma yiluphi uhlobo, futhi usendaweni yesibili yokugcina ngokwephesenti lobuthakathaka obunezinga eliphezulu lokuqina, oluhlolwa ngesisekelo ubungozi obungathi sína kuhlelo lokusebenza kanye nenhlangano uma kwenzeka ukwephulwa kwangempela. Uma kuziwa ohlotsheni lokuphulwa okutholwe ukuhlaziywa kwezinhlelo zokusebenza okuguquguqukayo embonini, abahlinzeki besevisi yezempilo bathola amaphuzu amahle ngokuphathelene nezinkinga zokuqinisekisa nokuncika okungavikelekile uma kuqhathaniswa namanye amasegimenti, kodwa bangaphansi kwesigameko esiphezulu sezinkinga zokuqinisekisa. ukubethela nokuthunyelwa ukumisa.

UChris Eng uthi:

“Siyazi ukuthi asikho isicelo esizovikeleka ngo-100% uma kuba sengozini yezokuphepha, ngakho kubalulekile ukuthi izinkampani zithathe zonke izinyathelo ezidingekayo ukuze zinciphise ubungozi ngangokunokwenzeka; lokhu kufaka phakathi imisebenzi yokuskena ngokushesha nangesivinini esivamile, ngezinhlobo ezihlukene zokuhlola, ukuhlanganiswa kwamathuluzi okuhlola endaweni yokuthuthukiswa, nokuqeqeshwa okusebenzayo ukusiza onjiniyela baqonde umthombo wobungozi futhi babulungise, noma ukubugwema ngokuphelele. Umkhakha wezempilo kufanele futhi ugxile ikakhulukazi ekubekeni phambili okufanele kunikezwe ubuthakathaka obubucayi, labo obungaba nemiphumela eyinhlekelele uma kungabhekwana nabo isikhathi eside ”.

U-Andrew McCall, iPhini Likamongameli Wezobunjiniyela e-Azalea Health Innovations, uthe: “Isithiyo esikhulu ekudaleni ukuphepha ekusebenzeni kwethu ukuthi abathuthukisi bathatha lokhu njengento elula njenganoma iyiphi enye, kuyilapho kuyinqubo eqhubekayo. okubalulekile kuwo wonke umjikelezo wokuphila wokuthuthukiswa kwesofthiwe. Sikhethe i-Veracode ngoba iyisixazululo esilula nesifaneleka kakhulu sokuhlanganiswa nezinqubo zethu ezikhona ”.

Izinga lokuvikeleka lamalabhulali ezinkampani zangaphandle

Kucatshangelwa ukwenyuka okubukhali kwemithetho evikela uchungechunge lokuhlinzekwa kwesoftware ngonyaka odlule, umbiko wahlaziya imitapo yolwazi yezinkampani zangaphandle ukuze kuhlonzwe ukuziphatha kobungozi obutholwe ngokuhlaziywa kokwakheka kwesoftware (SCA). Sekukonke, cishe ama-30% emitapo yolwazi esengozini ahlala esengozini ngemva kweminyaka emibili, kodwa izibalo zehliswa zaba ngama-25% emkhakheni wezempilo. Eqinisweni, nakuba iphesenti lomhlaba wonke lemitapo yolwazi engaphansi kokulimala okuhlonzwe nge-SCA livame ukwehla kancane kancane ngokuhamba kwesikhathi, umkhakha wezokunakekelwa kwezempilo ube nokwanda okufushane ngaphambi kokwehliswa okukhulu kwaleli phesenti, cishe ngonyaka odlule.

Mayelana Nesimo Sombiko Wokuphepha Kwesofthiwe

Umbiko we-Veracode State of Software Security (SoSS) v12 uhlaziye idatha yomlando ephelele evela kumasevisi namakhasimende e-Veracode. Sekukonke, lezi zingaphezu kwengxenye yesigidi (592.720) okwasetshenziswa kuzo zonke izinhlobo zokuskena, amaskena okuhlaziya aguqukayo angaphezu kwesigidi (10.34.855), amaskeni okuhlaziya amile angaphezu kwezigidi ezinhlanu (5.137.882) kanye nezikena zokuhlaziya ezingaphezu kwezigidi eziyi-18 ukwakheka kwesoftware (18.473.203). Wonke lawa maskena akhiqize imiphumela engaguquki eyizigidi ezingama-42, imiphumela eguquguqukayo eyizigidi ezi-3,5, kanye nemiphumela ye-SCA eluhlaza eyizigidi ezi-6.

Idatha imele izinkampani ezinkulu nezincane, abathengisi be-software bezentengiselwano, abathengisi be-software bangaphandle, namaphrojekthi anomthombo ovulekile. Ezihlaziyweni eziningi, isicelo sibalwe kanye kuphela, nakuba sasithunyelwe izikhathi ezimbalwa ukuze kulungiswe ubungozi baso futhi nezinguqulo ezintsha zilayishiwe.

Ulwazi mayelana ne-Veracode

I-Veracode inguzakwethu ohamba phambili we-AppSec wokwakha isofthiwe evikelekile, enciphisa ingcuphe yokuphulwa kwezokuphepha, nokwenza amaqembu okuvikela nentuthuko akhiqize kakhudlwana. Izinkampani ezithembele ku-Veracode, ngakho-ke, zingathuthukisa ibhizinisi labo futhi ziqhubekisele umhlaba phambili. Ngokuhlanganisa inqubo ezenzakalelayo, ukuhlanganiswa, isivinini, kanye nokusabela, i-Veracode isiza izinhlangano zithole imiphumela enembile, ethembekile ukuze zikwazi ukugxilisa imizamo yazo ekulungiseni, hhayi nje ekutholeni, ubungozi obungaba khona.

Copyright © 2022 Veracode, Inc. Wonke amalungelo agodliwe. I-Veracode wuphawu lokuthengisa olubhalisiwe lwe-Veracode, Inc. e-United States futhi lungase lufakwe kwezinye izindawo. Wonke amanye amagama emikhiqizo, izimpawu zokuhweba noma ama-akhronimi angabanikazi abafanele. Zonke ezinye izimpawu zokuthengisa ezishiwo kulokhu kukhululwa kwabezindaba ziyimpahla yabanikazi bazo.