AWS launches Continuum to find and verify code vulnerabilities
Amazon Web Services says Continuum ranks flaws by business impact, proves exploits in an isolated environment and requires human approval for fixes.
Amazon Web Services has officially launched AWS Continuum, a security service that finds vulnerabilities in code, checks whether they can actually be exploited and proposes fixes, according to digitaltoday.co.kr.
Continuum ranks detected issues by business impact and offers a fix for each one. It also builds a map that combines a customer's code with information about systems running on AWS, showing which systems are critical, who manages them and how services connect.
For vulnerabilities that can be reproduced, the service runs attacks in an isolated environment and includes the code and step-by-step procedures in its report to show that the attack works.
Human approval before fixes
AWS says every fix suggested by Continuum must be reviewed and approved by a person before it is applied. The company also plans to let Continuum apply some fixes on its own, within criteria set by the customer.
Quick answers
What does AWS Continuum do?
It finds code vulnerabilities, checks whether they can actually be exploited, ranks them by business impact and proposes a fix for each one.
Can Continuum apply fixes automatically?
Not yet. All suggested fixes must be reviewed and approved by a human. AWS plans to let Continuum apply some fixes on its own within criteria set by the company.
How does Continuum show a vulnerability is exploitable?
It runs attacks in an isolated environment against reproducible vulnerabilities and includes the code and step-by-step procedures in its report.