Software program safety teams elevated use of open supply tech by 61% over 2 years

Software security groups increased use of open source tech by 61% over 2 years

The Rework Expertise Summits begin October thirteenth with Low-Code/No Code: Enabling Enterprise Agility. Register now!

BSIMM12 knowledge signifies a 61% enhance in software program safety teams’ identification and administration of open supply over the previous two years, nearly definitely because of the prevalence of open supply elements in trendy software program and the rise of assaults utilizing widespread open initiatives as vectors.

The expansion in actions associated to cloud platforms and container applied sciences present the dramatic influence these applied sciences have had on how organizations use and safe software program. For instance, Constructing Safety In Maturity Mannequin (higher generally known as BSIMM) made solely 5 observations of “use orchestration for containers and virtualized environments” in BSIMM10, whereas it made 33 observations two years later for BSIMM12 — a rise of 560%.

One other rising development noticed within the BSIMM12 analysis is that companies are studying translate threat into numbers. Organizations are exerting extra effort to gather and publish their software program safety initiative knowledge, demonstrated by a 30% enhance of the “publish knowledge about software program safety internally” exercise over the previous 24 months.

BSIMM12 knowledge additionally exhibits a rise in capabilities targeted on inventorying software program; making a software program invoice of supplies (BOM); understanding how the software program was constructed, configured, and deployed; and the group’s means to redeploy based mostly on safety telemetry.

Demonstrating that many organizations have taken to coronary heart the necessity for a complete up-to-date software program BOM, the BSIMM exercise associated to these capabilities — “improve software stock with operations invoice of supplies” — elevated from 3 to 14 observations over the previous two years, a 367% enhance.

The transfer from sustaining conventional operational inventories towards automated asset discovery and creating payments of fabric contains including “shift all over the place” actions equivalent to utilizing containers to implement safety controls, orchestration, and scanning infrastructure as code.

BSIMM has grown from 9 collaborating firms in 2008 to 128 in 2021, with now practically 3,000 software program safety group members and over 6,000 satellite tv for pc members (aka “safety champions”).

This 2021 version of the BSIMM report — BSIMM12 — examines anonymized knowledge from the software program safety actions of 128 organizations throughout numerous verticals, together with monetary providers, FinTech, impartial software program distributors, IoT, healthcare, and expertise organizations.

Learn the full report by BSIMM.


VentureBeat’s mission is to be a digital city sq. for technical decision-makers to achieve information about transformative expertise and transact.

Our website delivers important info on knowledge applied sciences and methods to information you as you lead your organizations. We invite you to change into a member of our neighborhood, to entry:

  • up-to-date info on the themes of curiosity to you
  • our newsletters
  • gated thought-leader content material and discounted entry to our prized occasions, equivalent to Rework 2021: Study Extra
  • networking options, and extra

Turn into a member

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Posts