New York, Sept. 18, 2018 (GLOBE NEWSWIRE) -- Companies expect increased reliance on Cloud Native Applications (CNAs), however security concerns could prove to be a major obstacle, according to new research, The State of Cloud Native Security, commissioned by Capsule8, Duo Security, and Signal Sciences. The independent research surveyed 486 IT leaders to understand the cybersecurity challenges and opportunities of the ongoing shift toward cloud native applications in production environments.
The new research report was unveiled today at the first annual Cloud-Native Security Summit, a one-day, exclusive event bringing together senior security practitioners and industry innovators to discuss the changing security requirements for the cloud-native world.
As organizations seek to modernize infrastructure, Cloud Native Applications (CNAs) provide huge opportunities to increase reach, scale and efficiency. Cloud native adoption is significantly on the rise with 62 percent of companies noting that they rely on cloud native for more than half of their new applications. That figure is expected to grow to more than 80 percent over the next three years. However, businesses are keenly aware of the potential security risks that come along with it and more than half of those surveyed (56 percent) believe cloud native increases risk.
Growth Brings Growth - Cybersecurity Attacks Have Doubled Year-Over-Year
Fueling the concern over cyberattacks is their explosive growth, which shows no signs of slowing. According to the survey, 80 percent of respondents note attacks have increased at a rate of 2x or more over the last year. This is of particular concern when it comes to modern infrastructure, as production environments are not adequately protected for the amount of critical information they hold. Attacks on production environments levy significant consequences, with nearly half of those surveyed (48 percent) noting an attack has delivered damage to the system itself. Furthermore, 44 percent of those surveyed said an attack on production infrastructure has resulted in the loss of customer data.
Some additional key findings include:
- As attacks increase, so does the rate of security alerts; only about one-third of the organizations surveyed are able to respond to more than 75 percent of alerts
- Organizations have limited real-time visibility into attacks; 73 percent say they lack actionable, fine-grain, real-time insight into threats and ongoing attacks
- False positives continue to plague IT and security organizations; 46 percent of those surveyed said that more than half of production environment security alerts were false positives
- Poor analytics are the number one cause of false positives; nearly half reported this to be the primary issue
- Organizations struggle to balance security with efficient deployment of production applications; 40 percent of those surveyed do not currently have a DevOps function in place – amongst those, half said the lack of appropriate skills on the security team was the primary obstacle
Overall, the benefits of modernizing production infrastructure, through cloud native deployments, are clear. To take advantage of all that cloud has to offer, businesses must understand their current posture; establish a roadmap for integrating Cybersecurity capabilities into DevOps; and push for the visibility required across this critical business infrastructure.
To download the full report, “The State of Cloud-Native Security,” please visit: https://www.cloudnativesecuritysummit.com/report
Methodology
In August 2018, Capsule8, Duo and Signal Sciences surveyed 486 senior-level information technology (IT) and IT security (IT sec) decision makers. The web-based survey was executed by ResearchNow. All respondents were qualified to be senior-level decision makers with roles including CIO, CISO, VP of IT, Director of IT and senior cloud security architect, among others. All respondents are employed by companies with at least $250 million in annual revenue. Half represent companies with revenue between $250-999 million; half come from organizations with greater than $1 billion annual revenue.
About Capsule8
Founded in fall 2016 and headquartered in Brooklyn, NY, Capsule8 is developing the industry’s first and only real-time, zero-day attack detection platform purpose-built for modern production environments. Founded by experienced hackers and seasoned security entrepreneurs, and funded by Bessemer Venture Partners and ClearSky, Capsule8 is making it possible for Linux-powered enterprises to modernize without compromise. Learn more at www.Capsule8.com.
About Duo Security
Duo Security is the leading provider of Unified Access Security (UAS) and multi-factor authentication. Duo Beyond, the company's category defining zero-trust security platform, enables organizations to provide trusted access to all of their critical applications, for any user, from anywhere, and with any device. The company is a trusted partner to more than 12,000 customers globally, including Dresser-Rand, Etsy, Facebook, Paramount Pictures, Random House, Zillow and more. Founded in Michigan, Duo has offices in Ann Arbor and Detroit, as well as growing hubs in Austin, Texas; San Mateo, California; and London, UK. Visit Duo.com to find out more.
About Signal Sciences
Signal Sciences protects the web presence of the world’s leading brands. With its patented approach to WAF and RASP, Signal Sciences helps companies defend their journey to the cloud and DevOps with a practical and proven approach, built by one of the first teams to experience the shift. Based in Culver City, California, Signal Sciences customers include Under Armour, Etsy, Adobe, Datadog, WeWork and more. For more information, please visit www.signalsciences.com.