GitGuardian：2024实战实录：企业级应用安全机密治理态势白皮书（英文版）（38页）.pdf

1、Today more than ever,application security and secrets management have become critical concerns for organizations worldwide.The proliferation of non-human identities and the complexity of modern application architectures have created significant security challenges,particularly in managing sensitive

2、credentials.The scale of this issue is substantial:Machine identities now outnumber human ones by 45 to 1 in the average organization.“2022 Identity Security Threat Landscape,”by CyberArk12.8 million secrets were publicly exposed on GitH in 2023 alone,a 28%increase from 2022.“The State of Secrets Sp

3、rawl 2024”,by GitGuardianTo gain deeper insights into these challenges,CyberArk and GitGuardian have collaborated on the“Voice of Practitioners 2024”report.This study,based on a survey of 1,000 IT decision-makers across the US,UK,Germany,and France,examines the current state of application security,

4、focusing on secrets management and code security.Our findings reveal a growing awareness of secret sprawl risks and increased investment in mitigation strategies.However,significant gaps in organizational readiness persist.This report aims to provide insight into the current state of secrets securit

5、y in the IT field,based on the opinion of those who use or oversee them on a daily basis.3Executive summarySecrets leaks are on the rise79%of respondents reported having experienced or been aware of secrets leaking within their organization,up from 75%in the previous year.Notably,77%of these inciden

6、ts resulted in tangible damage to either the company,its employees,or both,highlighting the severe consequences of such leaks.Investment in secrets management is increasingOrganizations are responding to these challenges with substantial resource allocation,dedicating an average of 32.4%of security