CLOUD SECURITY
Palo Alto Network | September 23, 2022
Open source software is a critical component of cloud-native applications, allowing developers greater speed and modularity without having to reinvent the wheel each time they code. However, as the Unit 42 Cloud Threat Report, 2H 2021 found, open source software can often contain known vulnerabilities, which can open organizations up to significant risk. Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, today introduced the industry's first context-aware software composition analysis (SCA) solution to help developers safely use open source software components. The integration of SCA into Prisma® Cloud further demonstrates why Palo Alto Networks is the leading provider of cloud-native security.
Traditional SCA solutions are standalone products that can produce a large number of alerts but lack the runtime context to help fix vulnerabilities. With the addition of SCA to the Prisma Cloud platform, developers and security teams can proactively surface and prioritize known vulnerabilities that impact the application lifecycle (i.e., code, build, deploy and run). Prisma Cloud SCA delivers deep dependency detection and remediation of vulnerabilities in open source software before applications reach production. It can also help developers prioritize remediation based on software components that are already in use. These capabilities are not possible when SCA solutions are deployed as single point products.
"Developers leveraging open source software should be able to build applications with the confidence they aren't opening the organization up to risk, With the average application consisting of 75% open source components, SCA on Prisma Cloud is key to protecting the organization from code to cloud and empowering developers to build with speed."
Ankur Shah, senior vice president, Prisma Cloud, Palo Alto Networks
As a complete cloud-native application protection platform (CNAPP), Prisma Cloud is context-aware at every stage of the application lifecycle to provide a unified view of risk across organizations' cloud environments. Where current approaches to cloud security rely on siloed products that provide intermittent visibility without remediation, Prisma Cloud approaches cloud security with a comprehensive, prevention-first framework. With 188% increase in cloud incident response cases over the past three years, this shift in approach has become mandatory.
A complete code-to cloud CNAPP needs to incorporate the following five key principles in order to keep organizations safe:
Security from code to cloud — protects applications at every stage of the development lifecycle — from code, build, deploy and run.
Continuous, real time visibility — uses real-time and contextual security analysis of cloud environments to help prevent misconfigurations, vulnerabilities and threats.
Prevention-first protection — stopping attacks and defending against zero-day vulnerabilities to drive down mean time to remediation.
Choice for every cloud journey — aligning security needs with current and future cloud priorities by supporting a breadth of cloud service providers, workload architectures, continuous integration and continuous delivery (CI/CD) pipelines, integrated development environments (IDEs), and repositories with a unified platform
Cloud scale security — consistently secures applications as cloud environments scale.
In addition to SCA and to further increase the safety of cloud-native applications, Prisma Cloud introduced a software bill of materials (SBOM) among other capabilities for developers to easily maintain and reference a complete codebase inventory of every application component used across cloud environments. Implementing SCA and SBOM ensures Prisma Cloud aligns with these principles.
"Buyers looking for cloud-native security solutions need to keep the requirements of microservices security protection in mind. The 'bolted-on' and 'whack-a-mole' approaches are a thing of the past," said Frank Dickson, program vice president, Security and Trust at IDC. "Security should be embedded throughout the application development life cycle. This means that buyers need to fundamentally change their approach to security, although they need to continue to protect their run-time environments, they must also embrace solutions that embed security in the application development process, an approach referred to as 'shift left.' Shift left requires one to think less about security products and more about continuous security processes."
About Palo Alto Networks
Palo Alto Networks is the world's cybersecurity leader. We innovate to outpace cyberthreats, so organizations can embrace technology with confidence. We provide next-gen cybersecurity to thousands of customers globally, across all sectors. Our best-in-class cybersecurity platforms and services are backed by industry-leading threat intelligence and strengthened by state-of-the-art automation. Whether deploying our products to enable the Zero Trust Enterprise, responding to a security incident, or partnering to deliver better security outcomes through a world-class partner ecosystem, we're committed to helping ensure each day is safer than the one before. It's what makes us the cybersecurity partner of choice.
Read More
CLOUD SECURITY
Tecnotree | September 27, 2022
Tecnotree, a global provider of Business Support Systems (BSS) for the telecoms industry announces it will provide Digital BSS products built on Microsoft Azure to Digital Service Providers (DSPs). Through this integration, service providers will be empowered to innovate and adapt quickly while delivering superior customer experiences.
Tecnotree, a global provider of Business Support Systems (BSS) for the telecoms industry announces it will provide Digital BSS products built on Microsoft Azure to Digital Service Providers (DSPs). Through this integration, service providers will be empowered to innovate and adapt quickly while delivering superior customer experiences.
As 5G and the Internet-of-Things (IoT) reshape the industry landscape, service providers’ IT infrastructure today is more agile & cloud-native along with the underlying applications to support charging, billing & partner functions in a dynamic way. Tecnotree's Digital Suite-5 for consumers and business monetization is built natively to run on Kubernetes and is aligned with the Microsoft Azure cloud to drive multi-tenant, multi-region transformations that allow enterprises to lower total-cost-of-ownership (TCO) by eliminating significant upfront investments. Tecnotree Moments for enterprises and consumers enables a Digital Ecosystem of microservices as an extension of the Digital-BSS-Suite-5 by converting the Moments pre-integrated partner ecosystem into instant revenue generators across industries like: Sports, Gaming, Health & Wellness, Education, and other verticals. This allows Communications Service Providers (CSPs) to seamlessly transform into DSPs, with the opportunity to galvanize their IT ecosystems and launch innovative digital offerings.
While tier-1 providers have a clear path defined about migrating to the cloud in the next few years, tier-2 & 3 providers are considering the merits of cloud-based systems. At the same time, new-age providers, and Mobile Virtual Network Operators (MVNOs) are moving quickly towards cloud BSS.
"By integrating Tecnotree products with Microsoft Azure, we help service providers bring new services to the market, With this combined offering, DSPs now have the ability to unlock the full potential of 5G investments while having speed at the center of the transformation. As Tecnotree Moments for B2B2X headless commerce launches in different markets around the world as an extension of our Digital offering, the change will redefine the future of digital business.”
Padma Ravichander, CEO-Tecnotree Corporation
Rick Lievano, CTO WW Telecom at Microsoft says, “With Tecnotree Digital Suite 5 on the Microsoft Azure cloud, Tecnotree enables digital transformation for service providers. By combining Tecnotree’s deep domain expertise and Microsoft’s software capabilities, we help service providers create enhanced user experiences and unlock new revenue streams for the telecom ecosystem.”
About Tecnotree
Tecnotree is a 5G-ready digital Business Support System (BSS) player, with AI/ML capabilities and multi-cloud extensibility. Tecnotree is the first company in the world to be Platinum Certified by TM Forum Open API standards, and our agile and open-source Digital BSS Stack comprises the full range (order-to-cash) of business processes and subscription management for telecom and other digital services industries creating opportunities beyond connectivity. Tecnotree also provides Fintech and B2B2X multi-experience digital marketplace to its subscriber base through the Tecnotree Moments platform to empower digitally connected communities across gaming, health, education, OTT, and other vertical ecosystems. Tecnotree digital platform products and services today serve over 1 Billion Subscribers globally in over 70 countries. Tecnotree is listed on Helsinki Nasdaq (TEM1V).
Read More
CLOUD SECURITY
Blue Planet | September 28, 2022
Blue Planet, a division of Ciena has added new software enhancements to its intelligent automation product portfolio, helping communication service providers (CSPs) accelerate their digital transformation and quickly monetize innovative digital services built on 5G and multi-cloud infrastructure. These enhancements deliver end-to-end observability and control to automate service lifecycle management, improve operational agility and optimize customer experience.
The latest software innovations across the Blue Planet intelligent automation portfolio address multiple CSP digital transformation challenges and opportunities:
5G automation: The emergence of 5G standalone, network slicing and multi-access edge computing (MEC) allows CSPs to monetize their network in new ways by delivering innovative slice-based services and offering true digital experiences. Blue Planet is providing new 5G automation capabilities that include:
An open, productized 5G network slicing solution that incorporates end-to-end orchestration and observability for zero-touch lifecycle management – automating design, activation, assurance, and modification – of slices, including sub-slice management, across the radio access network (RAN) to the core.
Dynamic inventory for visualizing the optimal placement of physical and cloud-native resources as well as the end-to-end 5G service topology to help CSPs plan and deploy their 5G resources quickly and efficiently.
Multi-Cloud extensibility: Open cloud-based approaches are critical to increasing scale and agility, as well as enabling elastic connectivity models with cloud providers. New Blue Planet multi-cloud enhancements include:
Broad Kubernetes support that enables the intelligent placement and orchestration of cloud-based network functions (CNFs) and applications in distributed multi-cloud environments. As a truly cloud-native platform, Blue Planet can be deployed in any public or private cloud and can be consumed in a software-as-a-service (SaaS) model.
As a key player in the multi-cloud ecosystem, Blue Planet has recently joined Nephio, a new Linux Foundation open-source project seeded by Google and focused on Kubernetes-based intent-driven automation of network functions and the underlying infrastructure that supports them.
Low-code usability: Low-code technology helps CSPs improve operational agility by empowering them and their system integration partners to design and build new service types and applications for end customers with minimal IT and vendor support. New Blue Planet low-code enhancements include:
A single set of integrated development tools across the Blue Planet portfolio to accelerate the onboarding of new network resources and declarative templating abilities that simplify the modeling and creation of new services.
"With the rise of 5G and cloudified services, CSPs’ network and service operations will become even more complicated, making automation a necessity. Blue Planet has been making steady incremental progress to enable CSP automation, with its vendor-agnostic, modular, programmable take on service lifecycle management. This latest product upgrade from Blue Planet, with its focus on simplicity for the customer, provides telcos with an opportunity for growth and to engage with the digital economy,” said Francis Haysom, Principal Analyst, Appledore.
"Digitization is accelerating for CSPs as they modernize their operations to deliver innovative new services more quickly and cost-effectively,” said Rick Hamilton, At Blue Planet, we are laser-focused on creating intelligent automation capabilities that help our CSP customers digitize operations and deliver exciting new digital services to improve the customer experience.”
Senior Vice President, Blue Planet.
You can learn more about these new and enhanced features by visiting Blue Planet this week at Digital Transformation World (DTW) 2022, September 20-22 in Copenhagen, Denmark, where Blue Planet is participating in the ‘Supercharged edge-aware marketplaces’ Catalyst demonstration.
About Blue Planet
Blue Planet provides proven software solutions that accelerate digital transformation through intelligent automation. With more than 200 deployments worldwide, our modular, vendor-agnostic product portfolio enables real-time visibility and control to manage changing network operating environments. Backed by a global team of delivery specialists and an ecosystem of partners, Blue Planet is a division of Ciena that combines expertise across IT, network, and business operations to enable the agility necessary for creating differentiated end-customer experiences.
Read More