Izinkinga zokuphepha nazo zidalwa ukusetshenziswa kwemitapo yolwazi evela eceleni

Ezinsukwini ezithile ezedlule I-Veracode (inkampani yezokuphepha yesicelo) wazise nge-blog post, ucwaningo ngezinkinga zokuphepha ezibangelwe ukufakwa kwemitapo yolwazi yemithombo evulekile kuzicelo.

Njengomphumela wokuthwebula amakhosombe angama-86 kanye nocwaningo lwabathuthukisi abacishe babe ngu-79 XNUMX, kwanqunywa ukuthi ama-XNUMX% wemisebenzi yamtapo wolwazi evela eceleni edluliselwe kukhodi ayikaze ivuselelwe kamuva.

I-Veracode uveza esifundweni sakhenoma ukuthi inkinga enkulu ehambisana nezinkinga zokuphepha kuzinhlelo zokusebenza ukuthi sebenzisa imitapo yolwazi evulekile ukuthi esikhundleni sokuyixhumanisa ngamandla, izinkampani eziningi zifaka nje imitapo yolwazi edingekayo kumaphrojekthi wakho, ngaphandle kokubheka ukuvuselelwa noma izixazululo zamaphutha atholakele kamuva kule mitapo yolwazi.

Ngesikhathi esifanayo, uphawula ukuthi ikhodi yelabhulali ephelelwe yisikhathi ibangela izingqinamba zokuphepha nokuthi kulolu cwaningo kukhombisa ukuthi cishe ama-92% wamacala angagwenywa ngokumane avuselele ikhodi yelabhulali.

Namuhla sishicilela uhlelo lomthombo ovulekile lombiko wethu Wonyaka Wezokuphepha Kwesoftware. Ugxile kuphela ekuvikelekeni kwemitapo yolwazi evulekile, lo mbiko uhlanganisa ukuhlaziywa kwezi skena eziyizigidi eziyi-13 ezivela ezinqolobaneni ezingaphezu kwama-86.000, eziqukethe imitapo yolwazi eyingqayizivele engaphezu kwama-301.000.

Embikweni wonyaka odlule womthombo ovulekile, sibheke isifinyezo sokusetshenziswa nokuphepha kwemitapo yolwazi evulekile. Kulo nyaka, sidlule isifinyezo sesikhathi sokuhlola amandla okuthuthuka komtapo wolwazi nokuthi onjiniyela basabela kanjani ekuguqulweni kwelabhulali, kufaka phakathi ukutholakala kweziphazamisi.

Ngaphandle kwalokho izaba zokuthi imitapo yolwazi ayibuyekezwa, Kuyafaneleka ekuhlulekeni kokuhambisana okungenzeka okungenasisekelo ikakhulu. Ubhekene nalezi zinhlobo zezaba IVeracode ikufakazele okuphambene nalokho esifundweni sabo ukuthi cishe ama-69% wamacala afundwe, uthe ukuba sengozini kulungiswe ekukhishweni kwama-patch lokho bekungahlobene nezinguquko ekusebenzeni.

 Lo mbiko wembula ukuthi yize imitapo yolwazi yemithombo evulekile iyisisekelo cishe sayo yonke isoftware, ayisona isisekelo esiqinile, kepha kunalokho yisisekelo esihlala siguqukela futhi siguquka. Kodwa-ke, izindlela zentuthuko azihambelani ngaso sonke isikhathi nobunjalo bale mitapo yolwazi, okushiya izinhlangano zivelile. 

Tambien ibalula ukuthi umthelela ubuye wenziwe ngokwazisa abathuthukisi ekubukekeni kokukhubazeka: si onjiniyela baziswa yenkinga kumtapo wezincwadi, kufayela le- U-17% wamacala inkinga ixazululiwe ngehora kanye no-25% ngesonto.

Uma ngabe bekukhona imininingwane yokuthi ubungozi emtatsheni wezincwadi bungadala kanjani ukufaka engozini uhlelo lokusebenza, ezimweni ezingama-50% i-patch ikhishwe emasontweni amathathu, futhi ngaphandle kokunikeza imininingwane, ukususwa kobungozi bekufanele kulinde izinyanga eziyi-7 noma ngaphezulu.

Ingxenye yekota yabathuthukisi okuxoxwe nabo bathi lapho ukhetha umtapo wezincwadi ukushumeka, okugxilwe kakhulu ekusebenzeni namalayisense ekhodi, futhi kulapho-ke lapho ukuphepha kubhekwa khona.

Sibheka imitapo yolwazi ethandwa kakhulu ngo-2019 vs. 2020, kanye nemitapo yolwazi edume kakhulu enokukhubazeka okwaziwayo ngo-2019 vs. 2020. Ngezansi: ungangeza ukusetshenziswa kwemitapo yolwazi evulekile ohlwini lwezinto ezashintsha kakhulu 2020. Yini okushisayo nokungekho, nokuthi yini ephephile futhi yini engashintshi, ishintsha ngokushesha.

Kumele kuqashelwe ukuthi isimo ngokuqinisekiswa kwamalayisense ekhodi asingcono: ama-54% wabaphenduli bavumile ukuthi abaqinisekisi ngaso sonke isikhathi ilayisense yekhodi yelabhulali ngaphambi kokuyihlanganisa nomkhiqizo wabo. Kuphela ngama-27% wabaphenduli abenza ukuqinisekiswa kokuhambisana kwelayisense okuyimpoqo.

Ekugcineni, uma unentshisekelo yokwazi kabanzi ngocwaningo olwenziwe yiVeracode, ungathinta imininingwane Kulesi sixhumanisi esilandelayo.