DryRun Security Introduces Contextual Security Analysis (CSA) Guide for AppSec

DryRun Security Introduces Contextual Security Analysis (CSA) Guide for AppSec

AUSTIN, Texas--(BUSINESS WIRE)--Aug 15, 2023--

DryRun Security, a pioneering company addressing the gap between security and developers, is thrilled to unveil their new Contextual Security Analysis guide, catered to AppSec professionals and developers. The guide, accessible at www.dryrun.security/resources/csa-guide, equips readers to scale application security across their organization. This resource offers valuable insights on security testing that fits with modern development practices at organizations using DevOps or Agile methodologies for software delivery.

Contextual Security Analysis (CSA) represents a novel approach to application security that centers on comprehending an application's functionality, identifying sensitive components, and assessing the potential security implications of code changes. CSA leverages contextual cues gathered during code development, such as code paths, functions, authors, and languages, to facilitate real-time context-aware assertions. This approach is particularly effective for modern applications characterized by distribution, microservices architecture, and substantial reliance on APIs and third-party elements. The guide from DryRun Security is an essential tool to understanding how developers can secure their applications without being security experts.

“When developers outnumber security 100 to 1, a different approach is needed,” said Ken Johnson, Co-founder & CTO, DryRun Security. “This guide pulls from my experience at GitHub, where every piece of work they performed involved calculating risk. At GitHub, they used a risk metric to guide their efforts in everything from vulnerability triage to security reviews and everywhere in between. They constantly made these risk calculations and risk-based decisions, and they did so utilizing a multitude of variables and contextually relevant data. They didn’t call it Contextual Security Analysis at the time, but looking back now that really was the origin story for Contextual Security Analysis.”

Brian Walter, CEO of OpenContext, attests to the value of Contextual Security Analysis: "DryRun Security has guided us in uncovering security vulnerabilities within lesser-explored areas of their code. Their mission aligns seamlessly with their organization's ethos, as their developer team holds security in high regard. DryRun Security technology empowers their developers to preemptively address issues during the build phase, ensuring the delivery of a secure end product to their customers." Walter anticipates that the guide will facilitate the implementation and scalability of novel application security testing, and align the security and development groups in larger organizations.

The Contextual Security Analysis guide seamlessly aligns with DryRun Security's overarching objective of bridging the gap between security and developers. This initiative presents developers, who notably outnumber security professionals, with a robust solution and guidance for CSA implementation. As the company remains at the forefront of CSA innovation, this guide expands on the security training and industry presentations Johnson and James Wickett, CEO of DryRun Security, have delivered on the subject. Notably, the DryRun Security beta program has already provided tangible instances of contextual security analysis in action, drawing significant interest for its ability to bridge the development and security divide.

For more details about DryRun Security and to access the free CSA Guide, please visit https://www.dryrun.security/.

***

About DryRun Security: DryRun Security stands as a pioneering software security enterprise, delivering automated security reviews in tandem with code development. Founded by James Wickett and Ken Johnson, the company introduces an inventive approach through Contextual Security Analysis, an exclusive method refined by training over 10,000 developers in security testing and code reviews. This innovative approach empowers developers and security teams to transcend conventional security test approaches, proactively addressing potential bugs prior to deployment. To learn more, please visit https://dryrun.security/.

View source version on businesswire.com:https://www.businesswire.com/news/home/20230815640856/en/

CONTACT: Aaron Berger for DryRun Security

aaron.berger@asbstrategies.com

917-355-8959

KEYWORD: TEXAS UNITED STATES NORTH AMERICA

INDUSTRY KEYWORD: HARDWARE SECURITY DATA MANAGEMENT TECHNOLOGY CONTINUING CONSULTING EDUCATION TRAINING APPS/APPLICATIONS PROFESSIONAL SERVICES SOFTWARE NETWORKS VOIP INTERNET MOBILE/WIRELESS

SOURCE: DryRun Security

Copyright Business Wire 2023.

PUB: 08/15/2023 12:00 PM/DISC: 08/15/2023 12:01 PM

http://www.businesswire.com/news/home/20230815640856/en

Copyright Business Wire 2023.

DryRun Security Introduces Contextual Security Analysis (CSA) Guide for AppSec

DryRun Security Introduces Contextual Security Analysis (CSA) Guide for AppSec

Complimentary Guide Presents Insights and Solutions to Enable Developers to Efficiently Implement CSA

DryRun Security, a pioneering company addressing the gap between security and developers, is thrilled to unveil their new Contextual Security Analysis guide, catered to AppSec professionals and developers. The guide, accessible at www.dryrun.security/resources/csa-guide, equips readers to scale application security across their organization. This resource offers valuable insights on security testing that fits with modern development practices at organizations using DevOps or Agile methodologies for software delivery.

Contextual Security Analysis (CSA) represents a novel approach to application security that centers on comprehending an application's functionality, identifying sensitive components, and assessing the potential security implications of code changes. CSA leverages contextual cues gathered during code development, such as code paths, functions, authors, and languages, to facilitate real-time context-aware assertions. This approach is particularly effective for modern applications characterized by distribution, microservices architecture, and substantial reliance on APIs and third-party elements. The guide from DryRun Security is an essential tool to understanding how developers can secure their applications without being security experts.

“When developers outnumber security 100 to 1, a different approach is needed,” said Ken Johnson, Co-founder & CTO, DryRun Security. “This guide pulls from my experience at GitHub, where every piece of work they performed involved calculating risk. At GitHub, they used a risk metric to guide their efforts in everything from vulnerability triage to security reviews and everywhere in between. They constantly made these risk calculations and risk-based decisions, and they did so utilizing a multitude of variables and contextually relevant data. They didn’t call it Contextual Security Analysis at the time, but looking back now that really was the origin story for Contextual Security Analysis.”

Brian Walter, CEO of OpenContext, attests to the value of Contextual Security Analysis: "DryRun Security has guided us in uncovering security vulnerabilities within lesser-explored areas of their code. Their mission aligns seamlessly with their organization's ethos, as their developer team holds security in high regard. DryRun Security technology empowers their developers to preemptively address issues during the build phase, ensuring the delivery of a secure end product to their customers." Walter anticipates that the guide will facilitate the implementation and scalability of novel application security testing, and align the security and development groups in larger organizations.

The Contextual Security Analysis guide seamlessly aligns with DryRun Security's overarching objective of bridging the gap between security and developers. This initiative presents developers, who notably outnumber security professionals, with a robust solution and guidance for CSA implementation. As the company remains at the forefront of CSA innovation, this guide expands on the security training and industry presentations Johnson and James Wickett, CEO of DryRun Security, have delivered on the subject. Notably, the DryRun Security beta program has already provided tangible instances of contextual security analysis in action, drawing significant interest for its ability to bridge the development and security divide.

For more details about DryRun Security and to access the free CSA Guide, please visit https://www.dryrun.security/.

***

About DryRun Security: DryRun Security stands as a pioneering software security enterprise, delivering automated security reviews in tandem with code development. Founded by James Wickett and Ken Johnson, the company introduces an inventive approach through Contextual Security Analysis, an exclusive method refined by training over 10,000 developers in security testing and code reviews. This innovative approach empowers developers and security teams to transcend conventional security test approaches, proactively addressing potential bugs prior to deployment. To learn more, please visit https://dryrun.security/.

Aaron Berger for DryRun Security aaron.berger@asbstrategies.com 917-355-8959

View source version on businesswire.com: https://www.businesswire.com/news/home/20230815640856/en/