Don Mulrenan

Feb 7, 2024 | synopsys.com | Shandra Gemmiti |Charlotte McGuinn Freeman |Susan Miller |Don Mulrenan

As cloud-native applications continue to proliferate, containers are becoming the preferred option to package and deploy these applications because of the agility and scalability they offer. In fact,  that 75% of global organizations are running containerized applications in production. The popularity of containers has also attracted hackers looking for new ways to exploit applications. Containers expand an organization’s attack surface and increase the risk to the applications they house.

Nov 21, 2023 | synopsys.com | Don Mulrenan |Gary O’Neall |Phil Odence

Getting an inventory of your code versus an audit Black Duck® introduced the concept of managing open source, and the licensing and security risks that come with it, back in 2002. The process and the products have matured over the last two decades. Open source management has now become nearly as commonplace as source code control, whether development shops are using tools such as Black Duck or simply maintaining a spreadsheet of what is in their code.

Aug 25, 2023 | synopsys.com | Phil Odence |Don Mulrenan |Fred Bals

Parallels between the history of open source and the rise of AI in software development can teach us valuable AppSec lessons. The front page news about generative artificial intelligence (GAI) taking over software development from poor human developers has waned a bit. But there is no doubt that the technology will continue to transform the software development space over time.

Jul 14, 2023 | securityboulevard.com | Don Mulrenan

Software impacts tech and nontech businesses alike, which is why a strategic acquirer or PE firm always needs due diligence. *** This is a Security Bloggers Network syndicated blog from Application Security Blog authored by Don Mulrenan. Read the original post at: https://www.synopsys.com/blogs/software-security/why-nontechnical-organizations-need-due-diligence/

Jul 14, 2023 | securityboulevard.com | Don Mulrenan

By Don Mulrenan Get the most out of your Black Duck open source audit by understanding the report components and next steps you need to take. The post I have my Black Duck audit reports; What's next? appeared first on Application Security Blog ... Read More