๊ฐœ์š”

์˜คํ”ˆ AppSec ํŒŒํŠธ๋„ˆ ์ƒํƒœ๊ณ„

๋ชจ๋“  ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ๋ณด์•ˆ ๋ฌธ์ œ์™€ ์ฃผ์š” ๊ณต๊ธ‰์—…์ฒด์˜ ์ธ์‚ฌ์ดํŠธ๋ฅผ ๋‹จ์ผ ์˜คํ”ˆ ํ”Œ๋žซํผ์œผ๋กœ ํ†ตํ•ฉํ•˜์—ฌ ๋ณด์•ˆํŒ€์—์„œ ๊ฐœ๋ฐœ์ž๊ฐ€ ๋„๊ตฌ๋ฅผ ๋ณ€๊ฒฝํ•  ํ•„์š” ์—†์ด ๋ณด์•ˆ ํƒœ์„ธ, ์šฐ์„  ์ˆœ์œ„ ์ง€์ • ๋ฐ ์˜ˆ๋ฐฉ ํšจ๊ณผ๋ฅผ ๊ฐœ์„ ํ•  ์ˆ˜ ์žˆ๋„๋ก ์ง€์›ํ•ฉ๋‹ˆ๋‹ค.

๊ฐ€์‹œ์„ฑ ์ค‘์•™ ์ง‘์ค‘ํ™”

ํ•œ ๊ณณ์—์„œ AppSec ํ”„๋กœ๊ทธ๋žจ ์ œ์–ด

๊ฐœ๋ฐœ์ž ์›Œํฌํ”Œ๋กœ๋ฅผ ๋ณ€๊ฒฝํ•˜์ง€ ์•Š๊ณ  ๊ธฐ์กด ๋„๊ตฌ์™€ ์ธํ”„๋ผ๋ฅผ ์—ฐ๊ฒฐํ•˜์—ฌ AppSec๊ณผ ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ๊ฒฐ๊ณผ๋ฅผ ํ•˜๋‚˜์˜ ํ”Œ๋žซํผ์— ํ†ตํ•ฉํ•ฉ๋‹ˆ๋‹ค.

AppSec ์ ์šฉ ๋ฒ”์œ„
AppSec ๋Œ€์‹œ๋ณด๋“œ
APPSEC ๊ฒฐ๊ณผ ๋Œ€ํญ ๊ฐ•ํ™”

๊ธฐ์กด ์Šค์บ๋‹ ๋„๊ตฌ ํˆฌ์ž๋ฅผ ๊ทน๋Œ€ํ™”

๊ฐ•๋ ฅํ•œ ํด๋ผ์šฐ๋“œ ๋ฐ ๋Ÿฐํƒ€์ž„ ์ปจํ…์ŠคํŠธ ํ™œ์šฉ์œผ๋กœ ํƒ€์‚ฌ AppSec ๊ฒฐ๊ณผ๋ฅผ ์‹ ๋ขฐ๋„ ๋†’์€ ์ธ์‚ฌ์ดํŠธ๋กœ ๋ณ€ํ™˜ํ•˜์—ฌ ๋ฌธ์ œ์˜ ์šฐ์„  ์ˆœ์œ„ ์ง€์ • ๋ฐ ์œ„ํ—˜ ์˜ˆ๋ฐฉ์„ ๊ฐœ์„ ํ•ฉ๋‹ˆ๋‹ค.

์‚ฌ์ „ ๊ตฌ์ถ•๋œ ํ†ตํ•ฉ ์‚ฌ์šฉ

์ž์ฃผ ์‚ฌ์šฉํ•˜๋Š” AppSec ์Šค์บ๋„ˆ์—์„œ ์–ป์€ ๊ฒฐ๊ณผ๋ฅผ ์†์‰ฝ๊ฒŒ ํ†ตํ•ฉ

Cortexยฎ Cloud์˜ ์ฆ‰์‹œ ์‚ฌ์šฉ ๊ฐ€๋Šฅํ•œ ๋„ค์ดํ‹ฐ๋ธŒ ํ†ตํ•ฉ์„ ํ™œ์šฉํ•˜์—ฌ ์›ํ™œํ•˜๊ณ  ์•ˆ์ •์ ์ด๋ฉฐ ํ™•์žฅ ๊ฐ€๋Šฅํ•œ ํ”„๋กœ์„ธ์Šค๋ฅผ ๊ตฌ์ถ•ํ•˜์„ธ์š”.

AppSec ๋Œ€์‹œ๋ณด๋“œ

์ฃผ์š” ๊ณต๊ธ‰์—…์ฒด์˜ ๋ชจ๋“  AppSec ๊ฒฐ๊ณผ๋ฅผ ํ•˜๋‚˜์˜ ํ”Œ๋žซํผ์— ์ค‘์•™ ์ง‘์ค‘ํ™”ํ•˜๊ณ  ์šฐ์„  ์ˆœ์œ„ ์ง€์ •

Black duck
Black duck

Cortex๋Š” Black Duck SCA ๋ฐ Coverity์™€ ํ†ตํ•ฉ๋˜์–ด ์กฐ์ง์— ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ๋ณด์•ˆ ์œ„ํ—˜์— ๋Œ€ํ•œ ํฌ๊ด„์ ์ธ ๊ด€์ ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Checkmarx
Checkmarx

Checkmarx One๊ณผ Cortex Cloud๊ฐ€ ํฌ๊ด„์ ์ธ ์•ฑ ๋ณด์•ˆ ๋ฒ”์œ„๋ฅผ ์ œ๊ณตํ•˜์—ฌ SDLC ์ „์ฒด์—์„œ ํด๋ผ์šฐ๋“œ๋กœ์˜ ์ฝ”๋“œ๋ฅผ ๋ณดํ˜ธํ•ฉ๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Gitlab
Gitlab

GitLab CI ์Šค์บ” ๊ฒฐ๊ณผ๋ฅผ ํด๋ผ์šฐ๋“œ ์ปจํ…์ŠคํŠธ์™€ ์—ฐ๊ด€์‹œ์ผœ ํ†ตํ•ฉ๋œ ์œ„ํ—˜ ๊ฐ€์‹œ์„ฑ๊ณผ ๋” ๋น ๋ฅธ ํ•ด๊ฒฐ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Hashicorp
Hashicorp

HashiCorp์™€ Cortex Cloud๊ฐ€ ๋ณด์•ˆ์„ ๊ฐœ๋ฐœ ์ดˆ๊ธฐ์— ํ†ตํ•ฉํ•˜์—ฌ ๊ทœ์ •์„ ์ค€์ˆ˜ํ•˜๊ณ  ์ž๋™ํ™”๋œ ํด๋ผ์šฐ๋“œ ์ธํ”„๋ผ ์ œ๊ณต์„ ๋ณด์žฅํ•ฉ๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Semgrep
Semgrep

Semgrep๊ณผ Cortex Cloud์˜ ํ†ตํ•ฉ์œผ๋กœ ์ฝ”๋“œ์—์„œ ํด๋ผ์šฐ๋“œ๊นŒ์ง€ ํ†ตํ•ฉ๋œ ๊ฐ€์‹œ์„ฑ์„ ์ œ๊ณตํ•˜๋ฏ€๋กœ ํŒ€์€ ์œ„ํ—˜์˜ ์šฐ์„  ์ˆœ์œ„๋ฅผ ์ง€์ •ํ•˜๊ณ , ํ•ด๊ฒฐ ์ž‘์—…์„ ๊ฐ€์†ํ™”ํ•˜๋ฉฐ, ๋ณด์•ˆ ํƒœ์„ธ๋ฅผ ๊ฐ•ํ™”ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Snyk
Snyk

Snyk์˜ ์ฝ”๋“œ ๋ณด์•ˆ๊ณผ Cortex Cloud๋ฅผ ํ†ตํ•ด ์ปจํ…์ŠคํŠธ๋ฅผ ์—ฐ๊ฒฐํ•˜์—ฌ ์ค‘์š”ํ•œ ์œ„ํ—˜์„ ์ฐพ์•„ ์ˆ˜์ •ํ•ฉ๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ
Veracode
Veracode

๋™๊ธ‰ ์ตœ๊ณ ์˜ ์ทจ์•ฝ์  ํƒ์ง€ ๊ธฐ๋Šฅ๊ณผ ์ง€๋Šฅํ˜• ์œ„ํ—˜ ๊ด€๋ฆฌ, ์ž๋™ํ™”๋œ ํ•ด๊ฒฐ ๊ธฐ๋Šฅ์„ ๊ฒฐํ•ฉํ•œ ํฌ๊ด„์ ์ธ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ๋ณด์•ˆ์ž…๋‹ˆ๋‹ค.

๋” ์•Œ์•„๋ณด๊ธฐ


์‹ ๋ขฐํ•  ์ˆ˜ ์žˆ๋Š” ๋ฆฌ์†Œ์Šค๋กœ ๋„คํŠธ์›Œํฌ๋ฅผ ๋ณดํ˜ธํ•˜์„ธ์š”.