Vulnerability Analysis: Corporate DevSec Practices
summary
Covers corporate vulnerability analysis practices for DevSecOps, including industry best practices for applying vulnerability scanning, integrating automated scanning systems, and strategies for secret and password management and protection. Focuses on preventing risks within DevSecOps workflows by combining automation and secure credential storage.
AI-written summary · about
chapters (19)
- 0:00Vulnerability analysis basics
- 2:11Business vs technical priorities
- 4:39Buffer overflow analysis
- 5:43Dependency updates
- 7:50Third-party library risks
- 9:56Analyzer integration stages
- 11:21Developer workstation analysis
- 13:34False positives and blocking
- 14:37CI/CD pipeline integration
- 15:39Post-release dependency analysis
- 16:47Analyzer selection guide
- 17:09Secret management issues
- 19:40Password rotation problems
- 20:44Storing secrets externally
- 22:12Secret store integration
- 23:36Secret storage pros and cons
- 25:01Centralized secret management with CyberArk
- 26:46CyberArk agent and API integration
- 29:18Secret request monitoring
related talks
27mEffective Vulnerability Management for a DevSecOps Pipeline
42mA practical approach to DevSecOps
33mVulnerability Management Lifecycle in DevSecOps
16mIntroduction to DevSecOps
32mHow to fit Sec into DevOps without Security team
40mDevSecOps Guide to Bulletproof Your Development Workflow
31mDevOps: You Build It, You Secure It
34mDevSecOps: How to Use DevOps to Make You More Secure