{"id":5005,"date":"2014-12-02T07:00:21","date_gmt":"2014-12-02T15:00:21","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5005"},"modified":"2014-11-01T10:41:56","modified_gmt":"2014-11-01T18:41:56","slug":"security-securing-application-run-time-engines-to-thwart-attacks","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-securing-application-run-time-engines-to-thwart-attacks\/","title":{"rendered":"Security: Securing Application Run Time Engines to Thwart Attacks"},"content":{"rendered":"<p>Today enterprise security \u00a0is heavily focused on protecting data by preventing intrusion. \u00a0A <a title=\"Gartner Maverick Research report on App Security\" href=\"https:\/\/www.gartner.com\/doc\/2856020?ref=AnalystProfile\" target=\"_blank\">Gartner &#8220;Maverick Research&#8221;<\/a> report finds that 23 times the effort and resources are being spent on perimeter security compared to what&#8217;s being spent on application security.<\/p>\n<p><a title=\"Joseph Feiman, Gartner analyst bio\" href=\"http:\/\/www.gartner.com\/analyst\/10326\/JosephFeiman\" target=\"_blank\">Joseph Feiman<\/a>, Gartner analyst and author of the report, <a title=\"Forbes on Gartner Maverick Report\" href=\"http:\/\/www.forbes.com\/sites\/tomgroenfeldt\/2014\/10\/31\/gartner-calls-for-self-healing-apps-warateks-already-there\/\" target=\"_blank\">told Forbes<\/a> that &#8220;considering the ineffectiveness of perimeter protection in stopping attacks, this ratio cries for a fundamental change&#8230; \u00a0Modern security fails to test and protect all apps. Therefore, apps must be capable of security self-testing, self-diagnostics and self-protection. It should be a CISO (Chief Information Security Officer)\u00a0top priority.&#8221;<\/p>\n<p>Part of the reason for focusing on perimeter security as opposed to looking at app security is that it&#8217;s easier. \u00a0<a title=\"Brad Murdoch bio from Prevoty\" href=\"https:\/\/www.prevoty.com\/about\/leadership\" target=\"_blank\">Brad Murdoch<\/a>, business development manager at Prevoty, <a title=\"Four Reasons why Self Healing software is needed\" href=\"http:\/\/blog.prevoty.com\/embracing-role-of-early-adopter\" target=\"_blank\">cites four reasons<\/a> why security applications in the enterprise is hard:<\/p>\n<ul>\n<li>There are too many applications with too many ways to access, making the testing and securing of all applications difficult to impossible<\/li>\n<li>Too little time. Developers and IT are typically too focused on the feature development and delivery of new software to spend time identifying and remedying security issues. \u00a0It&#8217;s a thankless job. \u00a0There&#8217;s often little to show for the effort spent on plugging security holes that never may become issues.<\/li>\n<li>Lack of Expertise. \u00a0Security is a topic that often isn&#8217;t taught and isn&#8217;t well understood. \u00a0Application security is an area that&#8217;s massively neglected by many developers.<\/li>\n<li>Hacker technology is sophisticated. \u00a0While developers are typically soft on security, the opposite is true of hackers. \u00a0Hackers focus only on defeating security measures, and because of that, hacking techniques are sophisticated and evolve quickly. \u00a0Keeping pace with hackers requires a significant investment in resources and time.<\/li>\n<\/ul>\n<p>Feiman sees some hope though. \u00a0He points to the fact that while there are thousands of apps, the run-time engines that power those apps is very limited in number. \u00a0The Java JVM and .NET Common Language Runtime (CLR) represent the core of a large fraction of apps. \u00a0This vein of app security is being called &#8220;<a title=\"Runtime Application Self Protection\" href=\"http:\/\/www.gartner.com\/it-glossary\/runtime-application-self-protection-rasp\" target=\"_blank\">Runtime Application Self-Protection<\/a>&#8221; (RASP). \u00a0Some companies like <a title=\"Waratek home page\" href=\"http:\/\/www.waratek.com\/\" target=\"_blank\">Waratek <\/a>and <a title=\"Prevoty Home Page\" href=\"https:\/\/www.prevoty.com\/\" target=\"_blank\">Prevoty <\/a>are researching and developing this kind of security technology.<\/p>\n<p>Feiman says that &#8220;we believe by 2020, 25% of Web and cloud applications will become self-protecting, up from less than 1% today.&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-securing-application-run-time-engines-to-thwart-attacks%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Today enterprise security \u00a0is heavily focused on protecting data by preventing intrusion. \u00a0A Gartner &#8220;Maverick Research&#8221; report finds that 23 times the effort and resources are being spent on perimeter security compared to what&#8217;s being spent on application security. Joseph<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-securing-application-run-time-engines-to-thwart-attacks\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,36],"tags":[],"class_list":["post-5005","post","type-post","status-publish","format-standard","hentry","category-security","category-technology"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5005","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5005"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5005\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5005"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5005"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}