{"id":9,"date":"2021-11-13T17:08:14","date_gmt":"2021-11-13T17:08:14","guid":{"rendered":"https:\/\/www.kiuwan.cz\/?page_id=9"},"modified":"2021-11-15T12:26:05","modified_gmt":"2021-11-15T12:26:05","slug":"code-security","status":"publish","type":"page","link":"https:\/\/www.kiuwan.cz\/?page_id=9","title":{"rendered":"Bezpe\u010dn\u00fd k\u00f3d"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u017dijeme v dob\u011b, kdy si ji\u017e v\u011bt\u0161inu na\u0161ich \u010dinnost\u00ed neum\u00edme p\u0159edstavit bez pomoci modern\u00edch technologi\u00ed. Bohu\u017eel spolu se zvy\u0161uj\u00edc\u00ed se z\u00e1vislost\u00ed na IT syst\u00e9mech a slu\u017eb\u00e1ch nar\u016fst\u00e1 i kybernetick\u00e1 kriminalita. Rychl\u00fd rozvoj cloudov\u00fdch slu\u017eeb uk\u00e1zal, \u017ee by\u0165 d\u016fsledn\u00e9 zabezpe\u010den\u00ed firemn\u00ed infrastruktury ji\u017e nesta\u010d\u00ed. Kybernetick\u00e1 bezpe\u010dnost se tak st\u00e1v\u00e1 ned\u00edlnou sou\u010d\u00e1st\u00ed v\u00fdvoje aplikac\u00ed, kter\u00e9 jsou \u010dasto nejv\u011bt\u0161\u00edm zdrojem zranitelnost\u00ed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">D\u016fraz na bezpe\u010dnost k\u00f3du chr\u00e1n\u00ed jak dodavatele (v\u00fdvoj\u00e1\u0159e), tak jejich z\u00e1kazn\u00edky p\u0159ed riziky, jako jsou po\u0161kozen\u00ed reputace, naru\u0161en\u00ed provozu, ztr\u00e1ta dat, finan\u010dn\u00ed \u0161kody a dal\u0161\u00ed. Spole\u010dnost Kiuwan nab\u00edz\u00ed produkty a \u0159e\u0161en\u00ed pro dv\u011b nejd\u016fle\u017eit\u011bj\u0161\u00ed oblasti bezpe\u010dnosti aplikac\u00ed:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Code Security<\/h2>\n\n\n\n<hr class=\"wp-block-separator is-style-wide\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Static Application Security Testing (SAST)<\/strong> se zam\u011b\u0159uje na vytv\u00e1\u0159en\u00fd zdrojov\u00fd k\u00f3d. Tedy na k\u00f3d, kter\u00fd podnik vlastn\u00ed (m\u00e1 pod kontrolou). Vyhled\u00e1v\u00e1no je \u0161irok\u00e9 spektrum typick\u00fdch rizik, jako jsou nap\u0159\u00edklad nedostatky v oblasti autentizace a autorizace, neinicializovan\u00e9 prom\u011bnn\u00e9, body umo\u017e\u0148uj\u00edc\u00ed injektov\u00e1n\u00ed ciz\u00edho k\u00f3du, p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku, chyby v ARC, slabiny v komunikaci mezi procesy nebo sezen\u00edmi a mnoh\u00e9 dal\u0161\u00ed. Zkoum\u00e1na je i napadnutelnost prost\u0159ednictv\u00edm z\u00e1sah\u016f do konfigurace aplikace, elektronick\u00fdch podpis\u016f \u010di \u0161ifrov\u00e1n\u00ed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Software Composition Analysis <\/h2>\n\n\n\n<hr class=\"wp-block-separator is-style-wide\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Software Composition Analysis<\/strong> (SCA) narozd\u00edl od SAST nevy\u017eaduje m\u00edt k dispozici zdrojov\u00fd k\u00f3d. Pou\u017eit\u00ed tohoto typu anal\u00fdzy se p\u0159edpokl\u00e1d\u00e1 u aplikac\u00ed, kter\u00e9 vyu\u017e\u00edvaj\u00ed zakomponov\u00e1n\u00ed extern\u00edch technologi\u00ed, a\u0165 ji\u017e komer\u010dn\u00edch \u010di OpenSource. Odpov\u00edd\u00e1 tomu i typ rizik, kter\u00e9 SCA postihuje. Typicky se jedn\u00e1 o zhodnocen\u00ed bezpe\u010dnosti pou\u017eit\u00fdch aplika\u010dn\u00edch r\u00e1mc\u016f, modul\u016f, knihoven nebo komponent. Pomysln\u00fd rating se vytv\u00e1\u0159\u00ed na z\u00e1klad\u011b mnoha parametr\u016f, mezi kter\u00e9 pat\u0159\u00ed datum posledn\u00edho vyd\u00e1n\u00ed, \u010detnost aktualizac\u00ed, d\u0159\u00edve detekovan\u00e9 incidenty, zn\u00e1m\u00e9 zranitelnosti a mnoho dal\u0161\u00edch. Anal\u00fdza rovn\u011b\u017e zahrnuje vyhodnocen\u00ed souladu licen\u010dn\u00edch ujedn\u00e1n\u00ed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u017dijeme v dob\u011b, kdy si ji\u017e v\u011bt\u0161inu na\u0161ich \u010dinnost\u00ed neum\u00edme p\u0159edstavit bez pomoci modern\u00edch technologi\u00ed. Bohu\u017eel spolu se zvy\u0161uj\u00edc\u00ed se z\u00e1vislost\u00ed na IT syst\u00e9mech a slu\u017eb\u00e1ch nar\u016fst\u00e1 i kybernetick\u00e1 kriminalita. Rychl\u00fd rozvoj cloudov\u00fdch slu\u017eeb uk\u00e1zal, \u017ee by\u0165 d\u016fsledn\u00e9 zabezpe\u010den\u00ed firemn\u00ed infrastruktury ji\u017e nesta\u010d\u00ed. Kybernetick\u00e1 bezpe\u010dnost se tak st\u00e1v\u00e1 ned\u00edlnou sou\u010d\u00e1st\u00ed v\u00fdvoje aplikac\u00ed, kter\u00e9 jsou \u010dasto [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-9","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/pages\/9","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9"}],"version-history":[{"count":5,"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/pages\/9\/revisions"}],"predecessor-version":[{"id":36,"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=\/wp\/v2\/pages\/9\/revisions\/36"}],"wp:attachment":[{"href":"https:\/\/www.kiuwan.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}