Understanding Web App Security Challenges and Their Impact
In today's fast-paced digital world, organizations heavily rely on web applications and APIs for revenue generation and customer engagement. Fastly, Inc. (NYSE: FSLY), a recognized leader in edge cloud platforms, has partnered with Informa TechTarget's Enterprise Strategy Group to unveil a crucial study shedding light on the pressing challenges faced by cybersecurity professionals. The report, titled “Balancing Requirements for Application Protection,” indicates the complexities posed by the ever-evolving landscape of application security.
Current Trends in Application Security
The study reveals alarming trends with an average projection of a 39% increase in web applications and websites within organizations over the next two years. From 145 to 201 applications, experts express that the surge in API usage will be even more dramatic, with expectations that over 80% of applications will utilize APIs in this timeframe, up from 32%. This rapid expansion invites significant security concerns, making it increasingly vital for security teams to stay ahead amidst these changes.
The Escalating Threat Landscape
As cyber threats become increasingly sophisticated, the risks associated with web applications and APIs are escalating. Notably, 57% of midmarket and enterprise organizations reported experiencing attacks exploiting lesser-known vulnerabilities. Despite a substantial 92% of these organizations implementing at least one web application firewall (WAF), 67% utilize multiple WAFs from different vendors due to complexities arising from multi-cloud environments.
The Need for Consolidation
This fragmented approach signifies an urgent requirement for integrated, next-generation security solutions capable of safeguarding diverse infrastructures, including on-premises and hybrid environments. John Grady, a principal analyst at TechTarget's ESG, emphasizes that organizations must simplify their operations rather than layering multiple security solutions that may yield diminishing returns.
Confronting DDoS Attacks and Security Strategies
Another critical concern identified in the research is the increasing frequency of Distributed Denial of Service (DDoS) attacks. The unsettling statistic indicates that 45% of organizations that encountered DDoS attacks considered these actions as diversion tactics in larger, coordinated assaults. Alarmingly, 70% of these diversion attempts succeeded, resulting in severe operational disruptions and potential data loss.
Adopting Automated Defenses
The report highlights that as attackers continuously evolve their strategies, organizations are compelled to adopt automated security solutions to counter these threats. However, there’s a prevailing concern—59% of IT professionals feel that cyber adversaries are more adept at using AI for malicious purposes than organizations are at leveraging it for defense.
Fernando Medrano, Deputy Chief Information Security Officer at Fastly, emphasizes the importance of automation in defense mechanisms. He states that speed is critical in application security, as automated attacks require equally prompt automated defenses to uphold compliance with security regulations and protect user data.
Integration of Security Early in Development
The report advocates for a paradigm shift where security is integrated into product development processes from the outset. Waiting until later stages to consider security can leave organizations vulnerable to emerging threats. Fastly's insights underline the importance of embedding security deeply within all phases of application development to ensure a robust protective framework.
About the Research
This insightful research was conducted by ESG, which surveyed 383 cybersecurity and IT professionals focused on securing web applications within both midmarket and enterprise organizations. The survey aimed to capture the challenges and strategies prevalent in today's security climate.
About Fastly, Inc.
Fastly's edge cloud platform empowers leading brands globally, ensuring fast, safe, and engaging online experiences. With advanced offerings in edge compute, delivery, security, and observability, Fastly improves performance, enhances security, and drives innovation at scale. Major organizations like Reddit, Neiman Marcus, and Universal Music Group trust Fastly to elevate their digital experiences.
Frequently Asked Questions
What is the primary focus of the Fastly study?
The study focuses on the significant challenges faced by cybersecurity professionals in securing web applications and APIs amid evolving threats.
How much do web applications and APIs expect to grow?
Experts project a 39% increase in the number of web applications per organization over the next two years, with a notable increase in API usage.
What percentage of organizations experienced attacks?
57% of midmarket and enterprise organizations surveyed reported that they experienced web application and/or API attacks.
What is the role of automation in security?
Automation is emphasized as vital for countering rapidly evolving cyber threats, ensuring timely defenses against automated attacks.
Why is early integration of security critical?
Integrating security from the start of the development process helps organizations create robust defenses and reduces vulnerability to threats.
