![]() ![]() "The BSIMM study is very aligned in terms of accessing industry best practices. BSIMM12's observations concerning shared responsibility models in particular should encourage security leaders to consider how they're evolving to meet and mitigate any potential gaps in their security strategy." "The descriptive model of the BSIMM helps organizations to determine how to get started building a software security initiative and to mature it effectively. "The BSIMM study allows organizations to benchmark their current security practices so that they may establish priorities and maintain perspective in response to the emerging trends in the security landscape," said Mathieu Chevalier, Principal Security Architect and Manager, Genetec Inc., a member organization of the BSIMM community. The BSIMM provides a unique lens into how organizations are shifting strategies for implementing software-defined security features like policy as code to align with modern software development principles and practices." The BSIMM is a management tool for serving such a purpose. "Given the complexity and pace of these changes, it's never been more important for security teams to have the tools which allow them to understand where they stand and have a reference for where they should pivot next. This has resulted in increased adoption of software-defined approaches for deploying and managing software environments and cloud technology stacks," said Mike Ware, Information Security Principal at Navy Federal Credit Union, a member organization of the BSIMM community. "Over the last 18 months, organizations experienced a massive acceleration of digital transformation initiatives. Read about the BSIMM12 insights and trends or download the BSIMM12 digest. For example, observations of "use orchestration for containers and virtualized environments" increased 560% over the past two years. The growth in activities related to cloud platforms and container technologies show the dramatic impact these technologies have had on how organizations use and secure software. Since chip design costs will grow dramatically as the industry transits to 3 nm fabrication process as well as GAAFET transistors, AI-assisted EDA tools will become crucially important to developers of big chips.BSIMM12 data indicates a 61% increase in software security groups' identification and management of open source over the past two years, almost certainly due to the prevalence of open source components in modern software and the rise of attacks using popular open source projects as vectors. This is a big deal since physical designs are getting harder to implement and their complexity will only grow in the coming years. Synopsys' DSO.ai software enables chip developers to reduce power consumption, improve performance, shrink die size, and shorten development time of semiconductors. For smaller players Synopsys is mulling to offer AI-assisted tools in the cloud, which will further democratize chip design costs. Big companies like Google or Nvidia have rather formidable datacenters used for simulation of architectures and circuits, so nothing will change for them. Synopsys admits that usage of AI-assisted EDA tools requires rather tremendous compute horsepower that does not come cheap. Cutting down an SoC development time and the number of engineers required will enable small companies that currently cannot afford to develop their own processors to enter the market and offer solutions tailored for applications that presently rely on general-purpose hardware.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |