ESG Brief: The Role of DevSecOps in Automating Application Container  Security

Abstract:

The rapid adoption of application containers is creating a new set of cybersecurity challenges and, as a result, an expanded set of requirements for server workload security solutions. Research conducted by ESG shows that containers are moving quickly into production with a side effect of sprawl, as previously experienced by IT departments with the advent of virtual machines. Exploit attacks experienced by many organizations have created concerns about how application container environments—including registry-resident images and orchestration platforms—expose a new set of software, configuration, and access vulnerabilities. ESG research also reveals a strong interest in automating security via DevOps (“DevSecOps”) and shows how these practices allow cybersecurity and operations teams to integrate security in each stage of the continuous integration and continuous delivery (CI/CD) pipeline that governs the build-ship-run phases of the container lifecycle.

Topics: Cybersecurity Systems Management AWS re:Invent

ESG Brief: The Growth in the Use of Application Containers

Abstract:

Over the past several years, application containers and container management platforms, such as Docker and Kubernetes, have emerged as a new application packaging and delivery format, optimized for more agile application management and delivery. But with this rise has come questions about both the level of adoption and pervasiveness of usage for containers. Research conducted by ESG shows that containers are quickly moving from labs into production via the continuous integration and continuous delivery (CI/CD) DevOps methodologies being employed by many organizations that now manage infrastructure as code (IaC). But ESG also found that the move to containers doesn’t exclude existing application deployment methods, nor are containers limited to only new cloud-native applications.

Topics: Cloud Platforms & Services Cybersecurity Systems Management AWS re:Invent

ESG Brief: 2018 Public Cloud Infrastructure Trends

Abstract:

As organizations continue to leverage digital transformation for both their business and IT groups, the use of public cloud infrastructure has become a key driver for that transformation. As the use of public cloud infrastructure becomes a standard operational model, use of multiple cloud service providers, or multi-cloud, is also growing to meet the needs of transformation efforts. ESG’s research has found that these strategies are widespread and commonly driven by an organization’s application requirements.

Topics: Cloud Platforms & Services VMworld AWS re:Invent

ESG Brief: How Companies Choose Public Cloud Infrastructure Providers

Abstract:

The majority of organizations today are using public cloud infrastructure services to some extent. With this trend of increased public cloud infrastructure usage, it’s important to better understand the factors behind organizations’ criteria and process when it comes to selecting these public cloud service providers generally. This includes identifying the groups and individuals involved in and responsible for making cloud service provider decisions, and the capabilities that IaaS users look for and prefer in public cloud infrastructure and the providers offering these services.

Topics: Cloud Platforms & Services VMworld AWS re:Invent

ESG Brief: The Current State of Multi-cloud Strategies

Abstract:

Multi-cloud is one of the hottest buzzwords in IT today. Reflecting the growing use of multiple cloud service providers, vendors who offer products that support the public cloud must also be multi-cloud compatible. But what are the reasons behind companies choosing to be multi-cloud and what does the future hold for multi-cloud? ESG’s research has found that the core drivers for multi-cloud are the needs of the applications and active selection of providers by IT. As for the future of multi-cloud, ESG found there will be further fragmentation, with more diversity of providers, rather than a consolidation to a smaller number of providers.

Topics: Cloud Platforms & Services VMworld AWS re:Invent