Sep 1, 2021
Contrast Security, a leader in modernizing application security, today announced it enables organizations to make the software bill of materials (SBoM) mandate a reality. By leveraging its influence in the market and relationship with the National Institute of Standards and Technology (NIST), Contrast — and its Application Security Platform — directly supports the majority of the goals of President Joe Biden's executive order to improve the nation's cybersecurity. Application security is the most critical priority in the executive order, and preparing for stricter guidelines and higher levels of security in applications and the broader software supply chain should begin today.
In the fallout of a successful ransomware attack on a pipeline that supplies nearly half the East Coast's gasoline, the executive order places strict new standards on the cybersecurity of any software sold to federal agencies. It should be no surprise that improvements to application security are a recurring topic throughout the executive order's various sections. Specifically, President Biden calls for greater software supply chain transparency via SBoM, which removes the need to assess procured software source code.
Third-party software presents a variety of organizational risks that must be managed. For instance, some third-party libraries use risky licenses that could require an organization to open-source an entire application. In response, application security teams need an automated means to baseline their open-source security (OSS) posture while legal and compliance teams track licensing risk by building an SBoM that scales with their application portfolio.
"Contrast invented an entirely new technology to analyze the security of libraries with the full context of the application that uses them," said Jeff Williams, CTO and co-founder at Contrast Security. "We built Contrast OSS, the first product to embed software composition analysis (SCA) and open-source security within an application. This approach makes Contrast the only product that delivers SCA in real time, continuously and accurately, across an entire application and API portfolio."
Contrast customers can generate an SBoM directly in a way that meets the specifications of the OWASP's CycloneDX SBoM standard and the Presidential Executive Order. The capability is available through a simple API or a command through the Contrast command-line interface (CLI).
Contrast's history with open-source security began when its founders conducted the first large-scale study of insecure open-source use and later championed adding it to the OWASP Top 10. Currently, Williams serves on the board for OWASP's CycloneDX SBoM standard, an SBoM standard designed for use in application security contexts and software supply chain component analysis. CycloneDX enables developers, consumers, legal teams, and other stakeholders to quickly and accurately understand exactly what open-source libraries are in use in the applications and APIs they use.
Contrast has also been working closely with NIST on the implementation of the executive order on cybersecurity. The executive order directs NIST and the National Security Agency (NSA) to jointly publish guidelines covering the definition of critical software, software security testing, software labeling, and SBoM use. Contrast has been an active participant in the NIST workshops process and submitted six separate position papers on various issues. Currently, Contrast is working with NIST to help implement the software labeling program called for in the executive order. Contrast is thrilled to work with NIST to make its vision a reality.
To learn more about software supply chain transparency with Contrast, visit https://www.contrastsecurity.com/software-supply-chain-security.
About Contrast Security:
Contrast Security provides the industry's most modern and comprehensive Application Security Platform, removing security roadblock inefficiencies and empowering enterprises to write and release secure application code faster. Embedding code analysis and attack prevention directly into software with instrumentation, the Contrast platform automatically detects vulnerabilities while developers write code, eliminates false positives, and provides context-specific how-to-fix guidance for easy and fast vulnerability remediation. Doing so enables application and development teams to collaborate more effectively and to innovate faster while accelerating digital transformation initiatives. This is why a growing number of the world's largest private and public sector organizations rely on Contrast to secure their applications in development and extend protection in production.
Contact:
Contrast Security
Jacklyn Kellick
jacklyn.kellick@contrastsecurity.com
The younger O’Neal is a multi-hyphenate who made his runway debut with Dolce & Gabbana before landing a Coach campaign and appearing on Basketball Wives; now he’s making music with his stepdad
The MomToker faced backlash in 2022 for a video of her dancing in hospital with her sick infant son; she’s now expecting her third child with husband Conner, who admitted to using Tinder while married.
Last month the former teen heartthrob and The Fosters alum walked his mother down the aisle on Italy’s Amalfi Coast – but what do we know about his biggest supporter over the years?
Expectations of a rate cut next month increase as pay growth slows to its lowest rate for more than two years.
We support you and your zero checked bags EVER agenda. View Entire Post ›
Kim Tae-ri stars as talented young singer Yoon Jeong-nyeon whose mother (Moon So-ri) tries to stop her singing, in this Disney+ period drama.
The bullishness on Wall Street is largely based on confidence that the Federal Reserve will tame inflation, the economy will remain solid and corporate earnings will continue to grow.
She made her name leading glossy magazines. Now she’s joining the newsletter flock.
After the popular publication was folded into GQ, a group of them is striking out on its own. One of the first orders of business: doing away with album scores.
Sir Keir Starmer says this month's Budget was "going to be tough" but would "focus on rebuilding our country".
Some of these places deserve wayyyyyy more attention. Others, I definitely could have passed on. View Entire Post ›
Stroll around Austria’s fourth largest city and take in the places where Mozart was born, lived, and composed and conducted music.
As common as acne is, experts say there are some popular misconceptions about its causes. Research suggests diet and poor hygiene are not the clear culprits, but rather a multitude of factors are at play, including genetics, hormonal changes — and stress.
For Stephanie Craig and Mike Murphy, trying to grow their family has been difficult. Craig had a miscarriage in 2018 at 24 weeks and they tried IVF. Since then, the Guelph, Ont., couple have been looking for a surrogate, including now through social media.
Trip.com Group, a leading global travel service provider, reveals that while sustainability awareness is rising among travellers, there remains a gap between awareness and action. This is one of the key insights from the Sustainable Travel Consumer Report 2024 that the Group released today.
Global luxury hospitality leader Four Seasons and Lucid Group, Inc., maker of the world’s most advanced electric vehicles, announce a new partnership grounded in a shared vision of an exceptional, sustainable lifestyle. The collaboration underscores both companies’ commitment to environmental stewardship and responds to a growing guest desire for added flexibility and unique, eco-friendly experiences during their stay.
From 4th -8th November , 2024, the Southeastern Anatolian city of Şanlıurfa, home to the globally significant Neolithic sites of Göbeklitepe and Karahantepe, will host the World Neolithic Congress, the first of its kind. Organised under the auspices of the Ministry of Culture and Tourism and the Türkiye Tourism Promotion and Development Agency (TGA), this pioneering event will bring together approximately 1,000 scholars from 64 countries and 487 institutions to advance research and understanding of Neolithic cultures worldwide.
As autumn takes hold across Europe, Chia Laguna Resort, Sardinia welcomes guests seeking warm temperatures and activity filled days. Following an outstanding season marked by double-digit growth in occupancy rates, the resort welcomes all types of traveller to three distinct properties - Conrad Chia Laguna Sardinia, Baia di Chia Resort Sardinia - Curio Collection by Hilton, and Hotel Village
A far cry from the traditional African safari and catching sight of the ‘Big Five’ – Austria’s ‘Capital of the Alps’ offers instead five unique experiences for winter wanderers. From skiing under the stars or travelling through time at a Victorian Christmas market, to a magnificent carnival event that is only held every five years, the Innsbruck region is a hidden jewel, just waiting to be discovered.
The Gambia Experience celebrated its first flight of the season departing from Gatwick to Banjul on Friday, (11th Oct) marking over 35 years of winter sun holidays to The Gambia. Upon arrival at Banjul International Airport, passengers were warmly welcomed by The Gambia Experience resort team and British High Commissioner to The Gambia, Harriet King before being treated to a vibrant and welcoming reception from a local dance troupe, The Jola Cultural Group. Their energetic drumbeats and colourful costumes set the tone for a memorable holiday, providing an authentic, immersive experience, and first taste of the rich cultural traditions that make the destination so special.
The vote of confidence comes from Jeremy Chan, head chef at restaurant Ikoyi in London and who's created the new first-class menu for Eurostar.
Stay22, the travel tech company that offers affiliate revenue generation opportunities for travel content creators, has announced the integration of Booking.com’s wide range of products. This partnership will offer Stay 22’s network of over 2,700 global content creators the opportunity to generate revenue from every element of the travel experience in one place, including accommodations, flights, car rentals, and attractions, within their platforms.
Genius packing hacks, like a shirt that can be worn six ways, solid shampoo bars, and more. View Entire Post ›
Octopuses are intelligent, solitary creatures, and governments must stop funding ‘cruel and unsustainable’ octopus farms, reformers say.
The tech giant says it will use energy from small reactors to power its use of artificial intelligence.
For US$490 you can eat an authentic 18th century feast served by a butler at the British monarch’s table in Dumfries House, Scotland.
Four-month event featured music, dance, Chinese opera, multi-arts programmes, films, exhibitions, lectures, artist talks and masterclasses.
The poet-turned-rapper tells Style about seeing Flo Rida perform in high school, and how All Eggs in the Basket is not just the name of her upcoming release but a mantra for life.
CNBlue hit the big time in 2010 after their song Loner became a huge hit, and 14 years on, they talk about their career and new mini album X.
The Southern California mind (me) cannot comprehend the concept of a Vermont autumn... View Entire Post ›
Plaintiffs in antitrust case over Hermès limiting ability to buy coveted bags to customers who purchase other items amend their complaint.
A Chanel ambassador since 2018, Robbie succeeds the likes of Nicole Kidman, Catherine Deneuve and Marion Cotillard as the face of the iconic fragrance.
Kamala Harris’s campaign is pushing a version of the credit intended to fight child poverty, while Donald J. Trump sees the program primarily as a tax cut for people higher up the income scale.
I went on a quest to find worthwhile fall rituals. Here's what I found.
What could happen if Donald Trump drastically increases tariffs as he has promised to do?
This year’s programme includes a drama ripped from Hong Kong headlines, a social satire in a near-future Japan and a modern romantic drama.
Falling launch costs have given African nations a chance to send their own satellites into orbit.
Alabama woman's case led to law, signed by Barack Obama, that gave Americans more rights to sue for pay discrimination.
The youngest Pelosi’s 2022 documentary, Pelosi in the House, includes recordings she made of the January 2021 US Capitol attack – footage that was later used during an investigation into the riots
Angry at what they view as China’s state-led xenophobia, taught in schools and prevalent online, some people are taking action, even at personal risk.
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.