DEVOPSdigest

ZeroNorth filed two patents related to application security (AppSec) and vulnerability management.

The patents include:

- Normalization, Compression, and Correlation of Vulnerabilities: Customers assessing AppSec are challenged with managing multiple artifacts (e.g., source code, containers), artifact types, scan tools and security issues uncovered via security scanning. ZeroNorth’s capability enables organizations to normalize, compress, and track these many potentially large sets of issues to make them both manageable and actionable by distilling them to the smallest set of non-duplicate, relevant issues to remediate.

- Application Security Posture Identifier: Applications do not run in a vacuum; they are hosted on computing infrastructure that must be known and understood. To help customers gain a complete view of AppSec posture, this invention provides a mechanism to correlate applications to the infrastructure they run on. For an asset owner, this would make it possible to have a more complete view of risk within an application, as well as the infrastructure the application runs on.

“DevSecOps is complex because it centers on integrating security throughout the software development lifecycle, and using a wide set of security scanning tools to gain a clear picture of risk,” said John Worrall, CEO at ZeroNorth. “Through the innovation we are delivering, ZeroNorth is making it much easier for customers to drive toward true DevSecOps and greatly decrease AppSec risk.”