DevOps for the Discouraged
Talkat AppSec California 2015 · on Tuesday, 2015-01-27· at 16:15· Annenberg Community Beach House: Track 1, 415 Pacific Coast Hwy·
summary
Shows a working continuous delivery pipeline that runs security checks inside CI (Travis and Jenkins examples), wraps attack tools with gauntlt, and scripts scans with OWASP ZAP, brakeman, nmap, sqlmap and arachni. Claims small batch deploys (examples: 6 stage and 5 prod deploys in a day, and the 10‑deploys‑a‑day origin story) and demonstrates scoped, repeatable tests for specific pages so scans finish fast and failures surface in the build.
AI-written summary · about
chapters (13)
- 0:00Start
- 3:03James Wicket
- 5:45Audience Survey
- 9:00Approaches To Solve the Epistemological Problem of Software Development
- 9:12Agile
- 9:35Behavior Driven Development
- 18:29What Is Devops
- 20:08Cultural Influences
- 24:09Continuous Delivery
- 34:58Security Monitoring Tools
- 35:33Types of Scanning and Testing
- 43:59Sequel Map Example
- 45:10How To Do a Secure Pipeline Using Jenkins
related talks
37mA Secure Continuous Delivery Pipeline
43mBuilding a Secure DevOps Pipeline
45mLessons From DevOps: Taking DevOps Practices Into Your AppSec Life
01h 18mDevSecOps - Automating Security in DevOps
39mThe Path Of DevOps Enlightenment For InfoSec
31mDevOps: You Build It, You Secure It
23mTrue DevSecOps with People, Processes, and Technologies
37mDevelop and implement a successful DevSecOps approach