下载PDF
Empowering Developers to Deliver Secure Software: A Case Study on a Major North American Insurance Subsidiary
技术
- 应用基础设施与中间件 - 事件驱动型应用
- 网络安全和隐私 - 应用安全
适用行业
- 设备与机械
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 网络安全
- 篡改检测
服务
- 云规划/设计/实施服务
- 网络安全服务
挑战
这家北美保险子公司是一家全球性集团的一部分，该集团是全球顶尖的商业和财产/伤亡保险提供商之一，在应用程序安全方面面临着多项挑战。该公司希望提高开发人员对应用程序安全风险和安全编码实践的认识，以尽可能减少开发过程延迟的方式发现和修复漏洞，减少未解决的高风险漏洞的积压，并向所有人推出全球解决方案内部业务部门和团体。该公司现有的应用程序安全流程是不可持续的。使用传统静态应用程序安全测试 (SAST) 工具进行漏洞扫描通常一次需要几个小时，而且每个报告中的许多警报最终都是误报，浪费了宝贵的时间并可能延迟发布周期。
关于客户
本案例研究中重点介绍的北美保险子公司已在美国和加拿大开展业务 100 多年。它是全球领先的商业和财产/伤亡保险提供商之一的全球集团的一部分。北美业务拥有超过 10,000 名员工，其客户涵盖各个行业。鉴于应用程序是网络犯罪分子最喜欢的目标之一，这家北美信息安全领导者将成熟应用程序安全计划作为首要任务。
解决方案
该公司通过 Contrast Assess 将应用程序安全性进一步向左转移。 Contrast 客户成功团队协助入职并提供持续支持，而 Contrast 专业服务则帮助实施和推出解决方案。 Contrast Assess 使用仪器在每个应用程序中嵌入持续的安全扫描，并为开发人员提供实时反馈，指导他们如何在出现问题时进行修复。该公司还利用 Contrast 平台与 Microsoft Teams 的内置集成来管理公司主要协作工具中的漏洞通知。 Contrast Assess 的部署也是组织文化变革的催化剂，开发人员现在积极参与安全应用程序的交付。
运营影响
数量效益
相关案例.
Case Study
Smart Water Filtration Systems
Before working with Ayla Networks, Ozner was already using cloud connectivity to identify and solve water-filtration system malfunctions as well as to monitor filter cartridges for replacements.But, in June 2015, Ozner executives talked with Ayla about how the company might further improve its water systems with IoT technology. They liked what they heard from Ayla, but the executives needed to be sure that Ayla’s Agile IoT Platform provided the security and reliability Ozner required.
Case Study
IoT enabled Fleet Management with MindSphere
In view of growing competition, Gämmerler had a strong need to remain competitive via process optimization, reliability and gentle handling of printed products, even at highest press speeds. In addition, a digitalization initiative also included developing a key differentiation via data-driven services offers.
Case Study
Predictive Maintenance for Industrial Chillers
For global leaders in the industrial chiller manufacturing, reliability of the entire production process is of the utmost importance. Chillers are refrigeration systems that produce ice water to provide cooling for a process or industrial application. One of those leaders sought a way to respond to asset performance issues, even before they occur. The intelligence to guarantee maximum reliability of cooling devices is embedded (pre-alarming). A pre-alarming phase means that the cooling device still works, but symptoms may appear, telling manufacturers that a failure is likely to occur in the near future. Chillers who are not internet connected at that moment, provide little insight in this pre-alarming phase.
Case Study
Premium Appliance Producer Innovates with Internet of Everything
Sub-Zero faced the largest product launch in the company’s history:It wanted to launch 60 new products as scheduled while simultaneously opening a new “greenfield” production facility, yet still adhering to stringent quality requirements and manage issues from new supply-chain partners. A the same time, it wanted to increase staff productivity time and collaboration while reducing travel and costs.
Case Study
Integration of PLC with IoT for Bosch Rexroth
The application arises from the need to monitor and anticipate the problems of one or more machines managed by a PLC. These problems, often resulting from the accumulation over time of small discrepancies, require, when they occur, ex post technical operations maintenance.
Case Study
Robot Saves Money and Time for US Custom Molding Company
Injection Technology (Itech) is a custom molder for a variety of clients that require precision plastic parts for such products as electric meter covers, dental appliance cases and spools. With 95 employees operating 23 molding machines in a 30,000 square foot plant, Itech wanted to reduce man hours and increase efficiency.
