DevOps and Application Security
3 likes1,170 views
1. The document discusses introducing DevOpsSec which integrates security into the DevOps process. 2. It recommends making a plan for security, educating the entire team on security, and automating security testing and analysis within the continuous deployment pipeline. 3. The goal is to implement security earlier in the development process rather than as a last step, and establish a security-focused culture and team.
Related topics:1 of 24
DevOps and Application Security
- 1. DevOps and Application Security Shahee Mirza Co-Founder : BEETLES Twitter: @shaheemirza
- 2. DevOps?
- 3. But Where is the Security?
- 4. TRADITIONAL
- 5. QA and OPS: Devs:
- 6. Security is last task? • Security Testing • Firewall Configuration • Source Code Analysis
- 7. Security Testing, Firewall configuration and Code analysis – Takes time
- 8. But, the investor has no time
- 9. So, What have we got:
- 10. But, What we planned :
- 11. … is that end of everything?
- 12. Required: Security in DevOps
- 13. Welcome to DevOpsSec !!
- 14. But, How will I introduce DevOpsSec to my team?
- 15. Module 1: Make a plan for Security
- 16. Module 2: Connect entire Team
- 17. Module 3: Make a culture of Self- Learning about Security for Devs + QA.
- 18. Module 4: Automate everything.
- 19. Develop Code Commit Source Control Build Trigger Tests Deploy to ProductionDeploy to Test Env Report & Notify Publish to release repository Automatic security test SCA Test Security within Continuous Deployment
- 20. Module 5: Build a Security Team
- 21. Now, you have…
- 22. Summary
- 23. 1. Make a plan for security 2. Educate your team 3. Integrate security into automatic build process.
- 24. Thank you