下载PDF
Integrating Application Security into Software Development Life Cycle: A Case Study of Envestnet | Yodlee
技术
- 网络安全和隐私 - 应用安全
- 平台即服务 (PaaS) - 应用开发平台
适用行业
- 设备与机械
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 实验自动化
- 篡改检测
服务
- 系统集成
- 测试与认证
挑战
投资网 | Yodlee 是一家领先的数字金融服务数据聚合和数据分析平台，面临着无缝且经济高效地帮助开发人员在软件开发生命周期 (SDLC) 早期识别和修复代码中的应用程序安全漏洞的挑战。该公司还旨在通过减少报告的误报数量来减轻开发和安全从业人员遇到的负担。作为一家金融科技公司，安全对于 Envestnet 来说至关重要 | Yodlee，他们需要确保其平台上的每个产品都满足最严格的安全性和合规性要求。该公司定期进行代码审查，以确保不存在漏洞，但他们希望有一个更好的解决方案来减少误报数量，因为对误报进行分类会浪费时间并降低效率。他们还需要一种能够扩展、增强并与当前工具集无缝集成的安全解决方案。
关于客户
投资网 | Yodlee 是领先的数据聚合和数据分析平台，为数字金融服务提供基于云的动态创新。该公司为 1,000 多家公司提供服务，其中包括美国 20 家最大银行中的 13 家以及数百家互联网服务公司。这些公司订阅了 Envestnet | Yodlee 平台为数百万消费者提供个性化金融应用程序和服务。投资网 | Yodlee 解决方案有助于改变金融创新的速度和交付，改善数字客户体验，并为客户及其客户带来更好的成果。该公司受到货币监理署（OCC）和所有主要银行监管机构的监督和检查，并在最近24个月内接受了金融机构近200次审计。
解决方案
投资网 | Yodlee 采用 Contrast Assess 来帮助其开发和应用程序安全团队，将安全性融入其 DevSecOps 方法中。该公司还使用对比来补充渗透测试。 Contrast Assess 用于补充 Envestnet | Yodlee 的渗透测试工具。 Contrast 的仪表板和报告与内部渗透测试团队成员共享，突出显示关键漏洞并提供即时且可操作的分类建议。 Contrast Security 利用 EC2、Auto Scaling Groups、VPC 和 RDS 等 AWS 核心云服务提供高可用性和弹性可扩展性，以满足 Envestnet 不断变化的安全工作负载 |约德利。 AWS 加密服务（例如密钥管理服务和 Amazon Certificate Manager）用于保证传输中和静态数据的机密性。 Contrast Security 还利用 AWS Lambda 无服务器解决方案来构建云原生产品，为全球客户提供数据智能源。
运营影响
数量效益
相关案例.
Case Study
Smart Water Filtration Systems
Before working with Ayla Networks, Ozner was already using cloud connectivity to identify and solve water-filtration system malfunctions as well as to monitor filter cartridges for replacements.But, in June 2015, Ozner executives talked with Ayla about how the company might further improve its water systems with IoT technology. They liked what they heard from Ayla, but the executives needed to be sure that Ayla’s Agile IoT Platform provided the security and reliability Ozner required.
Case Study
IoT enabled Fleet Management with MindSphere
In view of growing competition, Gämmerler had a strong need to remain competitive via process optimization, reliability and gentle handling of printed products, even at highest press speeds. In addition, a digitalization initiative also included developing a key differentiation via data-driven services offers.
Case Study
Predictive Maintenance for Industrial Chillers
For global leaders in the industrial chiller manufacturing, reliability of the entire production process is of the utmost importance. Chillers are refrigeration systems that produce ice water to provide cooling for a process or industrial application. One of those leaders sought a way to respond to asset performance issues, even before they occur. The intelligence to guarantee maximum reliability of cooling devices is embedded (pre-alarming). A pre-alarming phase means that the cooling device still works, but symptoms may appear, telling manufacturers that a failure is likely to occur in the near future. Chillers who are not internet connected at that moment, provide little insight in this pre-alarming phase.
Case Study
Premium Appliance Producer Innovates with Internet of Everything
Sub-Zero faced the largest product launch in the company’s history:It wanted to launch 60 new products as scheduled while simultaneously opening a new “greenfield” production facility, yet still adhering to stringent quality requirements and manage issues from new supply-chain partners. A the same time, it wanted to increase staff productivity time and collaboration while reducing travel and costs.
Case Study
Integration of PLC with IoT for Bosch Rexroth
The application arises from the need to monitor and anticipate the problems of one or more machines managed by a PLC. These problems, often resulting from the accumulation over time of small discrepancies, require, when they occur, ex post technical operations maintenance.
Case Study
Robot Saves Money and Time for US Custom Molding Company
Injection Technology (Itech) is a custom molder for a variety of clients that require precision plastic parts for such products as electric meter covers, dental appliance cases and spools. With 95 employees operating 23 molding machines in a 30,000 square foot plant, Itech wanted to reduce man hours and increase efficiency.
