Black Hat , Cloud Security , Events

CNAPPs Emerge as a Game Changer in Cloud Security

Cloud-native application protection platforms are emerging as a game-changing solution to the evolving challenges in cloud security. Mattan Shalev, head of product management at Wiz, outlined the power of CNAPPs in reducing risk and fortifying cloud security.

See Also: Securing Applications, Accelerating DevOps With Clean Code

Traditional security methods approach security as "single pane of glass" solutions and could fall short in the dynamic and fast-paced cloud ecosystem. While cloud adoption accelerates business processes, it simultaneously introduces exposure risks and vulnerabilities that can be easily overlooked. This necessitates a new security operating model - a consolidated approach that aids in reducing operational costs and alleviating "vendor fatigue" caused by managing multiple disparate security tools, Shalev said.

CNAPPs such as the product developed by Wiz focus on intelligent correlation across different security domains. The goal is to detect intricate attack paths and mitigate the risks arising from complex cloud-native environments.

"It's not just about vulnerabilities," he said. "It's not just about the identity risk. It's not about the misconfiguration. It's about how you can combine all of them to detect this toxic combination."

In this video interview with Information Security Media Group at Black Hat USA 2023, Shalev also discussed:

• The power of cloud adoption;
• Uncovering risks related to exposure and compromised resources in the cloud;
• The significance of embedding security practices into processes and collaboration between teams.

Shalev leads vulnerability management, CSPM, malware detection, automation/response and compliance reporting at Wiz. Previously, he led the asset inventory product at Armis from scratch to release.