The relationship between application developers and security teams has always been complex, often marked by tension between two primary priorities: speed and security. As organizations increasingly rely on artificial intelligence (AI) and automation for development, this tug of war is intensifying, particularly in the context of firewall backlogs.

Traditionally, developers need to submit a firewall rule request prior to deploying new applications or services within an enterprise. However, security teams often take weeks to review and approve these requests due to an overwhelming volume of firewall logs used for investigations, policy maintenance, network traffic analysis, and identifying unauthorized access.

Developers face significant frustration as they seek to build and roll out new applications without extensive delays. As the pace of development accelerates, the number of pending requests continues to grow, creating a backlog that complicates both development and security processes.

A Historical Perspective on Developer-Security Tension

The historical context of this relationship reveals a long-standing struggle between developers and security teams. Chris McHenry, Chief Product Officer at Aviatrix, notes that the evolution of enterprise IT architecture, especially with the rapid adoption of cloud technologies, has fundamentally altered how organizations deploy applications and manage user access.

Before cloud computing became prevalent, security teams maintained a significant amount of control over organizational operations, managing physical devices and data centers. However, the shift to cloud environments has led to a dramatic change, with developers gaining more autonomy and the ability to procure and deploy applications without waiting for security clearance.

McHenry points out that this shift has created challenges for security teams, which now find it difficult to maintain control and establish necessary security protocols, leading to a situation where security often lags behind the speed of development.

The Current State of Firewall Backlogs

The current state of firewall management reveals a significant disconnect between the need for rapid application deployment and the time-consuming processes that security teams must navigate. McHenry highlights that organizations can face thousands of rule requests in their backlogs, with response times ranging from two to four weeks. This situation forces developers to wait unnecessarily, stalling progress on critical projects.

As developers become accustomed to the speed enabled by cloud technologies, the lag in security processes becomes increasingly frustrating. While some organizations are beginning to view security as a shared responsibility, significant challenges remain. Developers continue to feel pressure to release code quickly, while security teams are tasked with minimizing risk, often with limited time and context.

When security approvals are separate from the developer workflow, it results in lengthy feedback loops, rework, and frustration on both sides, as noted by Aaron Rose from Check Point. This disconnect further exacerbates the existing tensions.

Adapting to Evolving Architectural Needs

With the evolution of architecture, traditional firewall management practices have become inadequate. Developers were once able to bypass firewalls more easily when security policies were based on static IP addresses. However, in cloud environments, these addresses change frequently, complicating the process of implementing new firewall rules.

McHenry warns that organizations that rely solely on outdated practices for firewall operations are at risk of significant delays and vulnerabilities. As firewalls represent a critical point of control, the inability to adapt to current needs can lead to substantial exposure for organizations.

Furthermore, many organizations face challenges from multi-vendor sprawl and complex global operations, especially in larger enterprises. For small to medium-sized businesses, resource limitations often hinder effective firewall management, leading to unsecured networks.

Innovative Solutions to Improve Collaboration

Despite the challenges, there are opportunities for innovation in improving the relationship between developers and security teams. McHenry emphasizes that organizations should support developers with self-service capabilities while also adhering to security best practices. Automating certain processes and integrating security controls into developer workflows can help organizations strike a balance between speed and safety.

By redefining firewall policies as engineered products and automating risk assessments, organizations can streamline the approval process and reduce the burden on security teams. This shift allows for more efficient handling of requests, ultimately leading to faster application deployments without compromising security.

As the landscape continues to evolve, organizations must recognize that maintaining operational speed and implementing robust cybersecurity measures can coexist. However, without significant shifts in both technology and processes, the backlog of firewall requests is likely to worsen, posing ongoing challenges for development and security teams.

Source: Dark Reading News