SOT

SOT

SOAR
Security Orchestration, Automation and Response

Automation of response to information security incidents using dynamic playbooks and information security tools, building an attack chain and with an object-oriented approach

NG SOAR
Next Generation SOAR

Automation of response to information security incidents with built-in basic correlation (SIEM), vulnerability Scanner (VS), collection of raw events directly from information security tools, dynamic playbooks, building an attack chain and an object-oriented approach. AM and VM are included

AM
Asset Management

Description of the IT landscape, detection of new objects on the network, categorization of assets, inventory, life cycle management of equipment and software on automated workstations and servers of organizations

VS
Vulnerability Scanner

Scanning information assets with enrichment from any external services (additional scanners, The Data Security Threats Database and other analytical databases) to analyze the security of the infrastructure.

VM
Vulnerability Management

Building a process for detecting and eliminating technical vulnerabilities, collecting information from existing security scanners, update management platforms, expert external services and other solutions

FinCERT
Financial Computer Emergency Response Team

Bilateral interaction with the Central Bank, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

GovCERT
Government Computer Emergency Response Team

Bilateral interaction with the state coordination center for computer incidents, namely the transfer of information about incidents and receipt of prompt notifications/bulletins from the regulator

Mail us to sales@securityvision.ru or get demo presentation

Development without code

Development without code
24.06.2024

Ruslan Rakhmetov, Security Visio


In this article we will tell you about the approach to software development that allows you to create applications with minimal code usage It is called low-code or no-code, but the terms themselves differ from each other by the degree of simplicity: in the first case it may be necessary to program some elements using the classical method (for example, to add a script in the chosen programming language to perform the action on pressing a button), and for no-code - everything can be done in a simple interface without a single line of code


The process of creating programmes in this way is similar to assembling a LEGO constructor for children, when you can build a house, a spaceship or a huge tree from a whole set of separate parts Only when creating programmes other entities are used instead of constructor parts


- cards and tables

- buttons and other controls

- logical algorithms, for example, in the form of flowcharts

- main and context menus

- videos, icons and icons

and other graphical tools, e.g. for drawing graphs and diagrams



Картинка 1

Figure 1.1 - cards and tables



Картинка 2

Figure 1.2 - logical algorithms, for example, in the form of flowcharts


With the chosen method, anyone, even without programming experience, can create applications by dragging and dropping elements, ready-made templates and different tools. In this case, application development is many times faster than with traditional programming methods, and when needs change, it is much easier to make changes to the product.


Low-code and no-code methods can be used to create both simple applications (e.g. calculator) and more complex applications (e.g. SOAR - systems of automated response to IS incidents, design elements or mobile applications). Online shops, employee applications, website pages and services created in this way are more accessible to small businesses and start-ups, but can be used in the largest organisations to create entire ecosystems of products linked by a common interface, data model and information transfer methods.


No-code tools are also used for accelerated prototyping, when before developing an application in the classic way it is necessary to quickly create a product to demonstrate its appearance and basic functionality. In this case, the use of no-code development is similar to a rough draft or drawing a scheme of complex engineering equipment on a napkin before creating a set of complete and detailed drawings.


There are many such services on the market for various fields of activity, such as websites, mobile applications, business processes, training and games:


- Webflow for creating high-quality websites;

- Adalo and AppMaster for mobile apps;

- Glide for mobile applications based on Google Tables ;

- Zapier for automating tasks between different applications;

- Airtable for databases and workflow management;

- Integromat and Workato for application integration and task automation;

- Kissflow for workflow automation and task management;

- Nintex for business process automation and application creation;

- Figma and Sketch for interface design, website and application prototyping;

- Adobe XD and Bubble for prototypes and web applications;

- UXPin for design systems and user interfaces;

- Proto.io for interactive prototypes and design systems;

- Kahoot! for creating interactive quizzes and games;

- Genially and Mentimeter for interactive presentations and surveys;

- ThingLink and Pear Deck for interactive images and videos such as lessons;

- Classcraft for game-based learning spaces.


And Backendless, Shoutable, etc. services for application development tasks, or SV platform for building products in information security automation and IT.


Imagine a complex system that can be built from off-the-shelf parts so that it is robust and resilient, easy to use and adapt because it can be fully customised, and fully manageable - if it is used to create complex ecosystems of products. Most of these services are online tools, but there are also solutions that can be installed within your company and managed independently of external factors.


All in all, low-code/no-code are powerful tools that can open up the world of software development to a wide range of people, and allow you to make truly customised products. The scope of application of low-code/no-code platforms is constantly expanding and is benefiting various areas of the economy:


- Finance: creating loan applications, analysing data, investment management;

- Healthcare: making doctor's appointments, managing medical histories, telemedicine;

- Education: creating online courses, testing, managing educational institutions;

- Marketing: conducting email newsletters, creating lendings and automating marketing campaigns;

- Real Estate: property search, transaction management, property advertising;

- Law: document preparation, case management, legal counselling;

- Manufacturing: supply chain management, quality control, production planning;

- Public sector: applying for services, paperwork, liaising with citizens;

- Information Security and IT: integrating different solutions into common ecosystems, generating alerts and automated reports, managing applications;


These are just a few examples, the platforms can actually be used in almost any sphere (see Hubr , Forrester and Gartner analytics) where task automation or software creation is required, and the approach itself will allow:


1) reduce time (due to simplicity) and costs (due to simpler requirements for developers and speed of development itself);

2) increase productivity and optimise the team;

3) improve quality by creating reliable and secure applications.


To choose a platform for your tasks, you can ask yourself three simple groups of questions:


Define your goals and objectives.


- What do you want to create with the platform?

- What application functions do you need to fulfil?


Estimate your budget.


- How much are you willing to spend on the platform?

- Do you need a single interface for such development or are you ready to use several services for different tasks?


Determine the level of technical skills.


- Do you need a platform with a simple interface or are you ready for more complex features?

- Are the specialists proficient in different programming languages?

- Are you using any scripts now to transfer them to a future product?


And also read reviews and try several platforms: many platforms offer free trials so you can test several options before making a decision.


information security SOAR

Recommended

Security Vision's ‘Chips’: working together
Security Vision's ‘Chips’: working together
Security of transfers and payment for goods via SBP. Part 1
Security of transfers and payment for goods via SBP. Part 1
Capabilities of the updated Security Vision SOAR and NG SOAR products
Capabilities of the updated Security Vision SOAR and NG SOAR products
Quality metrics for dynamic playbooks
Quality metrics for dynamic playbooks
Information interaction with the Bank of Russia's FinCERT API via API
Information interaction with the Bank of Russia's FinCERT API via API
Review of NIST Publication SP 800-124 Rev. 2 (Draft) "Guidelines for Managing the Security of Mobile Devices in the Enterprise"
Review of NIST Publication SP 800-124 Rev. 2 (Draft) "Guidelines for Managing the Security of Mobile Devices in the Enterprise"
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
MITRE publication ‘11 World-Class SOC Centre Strategies’. Strategy #5: Prioritise response to cyber incidents
MITRE publication ‘11 World-Class SOC Centre Strategies’. Strategy #5: Prioritise response to cyber incidents
The Hive. Parsing an open source solution
The Hive. Parsing an open source solution
FSTEC Threat Model
FSTEC Threat Model
Review of the publication NIST SP 800-207 "Zero Trust Architecture"
Review of the publication NIST SP 800-207 "Zero Trust Architecture"
Enterprise information security policy - example and tips for development
Enterprise information security policy - example and tips for development

Recommended

Security Vision's ‘Chips’: working together
Security Vision's ‘Chips’: working together
Security of transfers and payment for goods via SBP. Part 1
Security of transfers and payment for goods via SBP. Part 1
Capabilities of the updated Security Vision SOAR and NG SOAR products
Capabilities of the updated Security Vision SOAR and NG SOAR products
Quality metrics for dynamic playbooks
Quality metrics for dynamic playbooks
Information interaction with the Bank of Russia's FinCERT API via API
Information interaction with the Bank of Russia's FinCERT API via API
Review of NIST Publication SP 800-124 Rev. 2 (Draft) "Guidelines for Managing the Security of Mobile Devices in the Enterprise"
Review of NIST Publication SP 800-124 Rev. 2 (Draft) "Guidelines for Managing the Security of Mobile Devices in the Enterprise"
What Security Gateways are and what functions they perform
What Security Gateways are and what functions they perform
MITRE publication ‘11 World-Class SOC Centre Strategies’. Strategy #5: Prioritise response to cyber incidents
MITRE publication ‘11 World-Class SOC Centre Strategies’. Strategy #5: Prioritise response to cyber incidents
The Hive. Parsing an open source solution
The Hive. Parsing an open source solution
FSTEC Threat Model
FSTEC Threat Model
Review of the publication NIST SP 800-207 "Zero Trust Architecture"
Review of the publication NIST SP 800-207 "Zero Trust Architecture"
Enterprise information security policy - example and tips for development
Enterprise information security policy - example and tips for development

Other articles

Review of the publication NIST SP 800-210 "General Access Control Guidance for Cloud Systems"
Review of the publication NIST SP 800-210 "General Access Control Guidance for Cloud Systems"
How to learn how to build a Kilchain
How to learn how to build a Kilchain
The Three Elephants of Windows Logging
The Three Elephants of Windows Logging
The Hive. Parsing an open source solution
The Hive. Parsing an open source solution
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
SSDL: ML for code and behaviour testing of opensource solutions
SSDL: ML for code and behaviour testing of opensource solutions
Review of the publication NIST SP 800-88 "Guidelines for Media Sanitization"
Review of the publication NIST SP 800-88 "Guidelines for Media Sanitization"
Fantastic TI and Where He Dwells
Fantastic TI and Where He Dwells
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #11 ‘Increase Efficiency by Expanding SOC Functionality’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #11 ‘Increase Efficiency by Expanding SOC Functionality’

Other articles

Review of the publication NIST SP 800-210 "General Access Control Guidance for Cloud Systems"
Review of the publication NIST SP 800-210 "General Access Control Guidance for Cloud Systems"
How to learn how to build a Kilchain
How to learn how to build a Kilchain
The Three Elephants of Windows Logging
The Three Elephants of Windows Logging
The Hive. Parsing an open source solution
The Hive. Parsing an open source solution
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
Review of NIST Publication SP 800-190, ‘Application Container Security Guide’
SSDL: ML for code and behaviour testing of opensource solutions
SSDL: ML for code and behaviour testing of opensource solutions
Review of the publication NIST SP 800-88 "Guidelines for Media Sanitization"
Review of the publication NIST SP 800-88 "Guidelines for Media Sanitization"
Fantastic TI and Where He Dwells
Fantastic TI and Where He Dwells
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #11 ‘Increase Efficiency by Expanding SOC Functionality’
MITRE publication ‘11 Strategies for a World-Class SOC Centre’. Strategy #11 ‘Increase Efficiency by Expanding SOC Functionality’