アプリケーション言語用の Datadog ライブラリを使用して、本番システムを標的とした脅威の検出と保護、およびコードとそのオープンソース依存関係におけるリスク管理を可能にします。サーバー、Docker、Kubernetes、AWS ECS、(対応言語の) AWS Fargate でホストされているアプリの脆弱性と脅威を検出することができます。

In general, setting up Application Security Management (ASM) involves:

  1. Identifying services that are vulnerable or are under attack, which would most benefit from ASM. Find them on the Security tab of your Service Catalog.
  2. Updating to the latest Datadog library (the most recent APM tracing library).
  3. Enabling the library to collect the application security data from the services and send it to Datadog.
  4. Triggering security signals in your application and seeing how Datadog displays the resulting information.

Prerequisites

1-Click Enablement
If your service is running with an Agent with Remote Configuration enabled and a tracing library version that supports it, hover over the Not Enabled indicator in the ASM Status column and click Enable ASM. There's no need to re-launch the service with the DD_APPSEC_ENABLED=true or --enable-appsec flags.
1-Click Enablement
If your service is running with an Agent with Remote Configuration enabled and a tracing library version that supports it, hover over the Not Enabled indicator in the ASM Status column and click Enable ASM. There's no need to re-launch the service with the DD_APPSEC_ENABLED=true or --enable-appsec flags.

アプリケーション言語を選択すると、言語とインフラストラクチャーの種類に応じてこれらの手順を実行する方法の詳細が表示されます。

Java
.Net
go
Ruby
PHP
Node.js
Python
nginx

その他の参考資料