DevSecOps March 2018 - Extract
Download as PPTX, PDF0 likes59 views
This document outlines a software development security assurance model that includes centralized servers for building developer workstations, reporting vulnerabilities, and source code management. It describes performing various security tests like static code analysis, dynamic testing, interactive testing, open source component analysis, and manual penetration testing on applications and networks. Automated tests integrate with defect management and security tools provide controls.
Related topics:1 of 1
Download to read offline
More Related Content
More from Michael Man (15)
Ad
Recently uploaded (20)
Ad
DevSecOps March 2018 - Extract
- 1. Dev Workstation Build Server Centralize Report (Vulnerability Management) Server SCM Static Code Analysis (SAST) Dynamic Testing (DAST) Interactive Testing (IAST) Open Source Component Security Manual Penetration Testing – Out of Band Scope: Application and Network layer – White/Black box Defect Management AUTOMATION INTEGRATION POINTS SECURITYASSURANCEMODEL Legend Black Box: Development Stack Blue Box: Automation - Integration Red Box: Security Tools and Controls Infrastructure Scanning