Shadow Code in security’s blind spot, ups risk of attack

guest · Aug 13, 2020

Shadow Code in security’s blind spot, ups risk of attack
August 13, 2020
https://www.scmagazine.com/website-...e-in-securitys-blind-spot-ups-risk-of-attack/

The proliferation of Shadow Code – third-party scripts and open source libraries used in web applications – may help organizations accelerate their digital transformations but it also puts them at higher risk of cyberattack.

Security teams are finding the Shadow Code, the code equivalent to rogue or Shadow IT, remains a blind spot for their organizations, with a mere 8 percent of respondents in a PerimeterX/Osterman Research report saying they have complete visibility into the hidden code running on their websites. That’s a drop from 10 percent in 2019.

“Given the highly dynamic nature of these scripts, what the analyst sees might differ significantly from what actually runs on a customer’s browser,” Ameet Naik, security evangelist at PerimeterX, told SC Media.
Click to expand...

“Third-party scripts provide essential, much needed value-added functions such as analytics, chatbots and payment services.”
He recommends that security teams “take a trust but verify approach,” continuously monitoring script activity and detecting and mitigating threats through behavioral analysis and machine learning.
Click to expand...

PerimeterX:
Shadow Code: What Is It And Why Should You Care

The Rise of Shadow Code
Shadow Code is the software development equivalent of Shadow IT. In Shadow IT, employees use cloud services and software that is not approved, monitored or supported by IT. Shadow IT can range from unauthorized SaaS subscriptions to AWS cloud servers spun up on a credit card without oversight or compliance.

Shadow Code is when developers include in applications third-party software code sometimes without approval or any safety validation. They do this because it is usually quicker than writing the functionality from scratch.
Click to expand...

Shadow Code: The Hidden Risk to Your Website

Modern web applications make extensive use of open source libraries and third-party scripts in order to innovate faster and keep pace with evolving business needs. However, only 8% of organizations have full insight into this Shadow Code that runs on their application.
Click to expand...

Log in or Sign up

Shadow Code in security’s blind spot, ups risk of attack

guest Guest

Log in or Sign up

Shadow Code in security’s blind spot, ups risk of attack

guest Guest

Useful Searches