Diving into a DevSecOps Reference Architecture
summary
A layered DevSecOps reference architecture maps supply-chain inputs, manual and automated security steps, and SOC feedback into a CI/CD flow; it separates heavy static analysis into its own stage to avoid blocking builds, applies signing every stage to provide irrefutable audit evidence and stage-duration checks, and shows chaos engineering plus binary scrambling/moving target defense to invalidate in-memory exploits. It documents automated rebuilds/self-patching on detected intrusions and is available as PNG, PDF and a draw.io editable file.
AI-written summary · about
chapters (7)
- 0:00Intro
- 0:25About Tokyo
- 1:24Reference Architecture
- 4:02Pipeline Operations
- 4:40Signatures
- 5:50Chaos Engineering
- 7:55Formats
related talks
36mUnderstanding the Sec in DevSecOps: Beyond Just Shifting Left
45mDevSecOps : add Security to your DevOps!
37mDevSecOps Guide to Bulletproof Your Development Workflow
31mWhy SecDevOps is the new way in Cybersecurity?
30mSecuring DevOps using OWASP DevSecOps Tools
23mTrue DevSecOps with People, Processes, and Technologies
30mDevSecOps: More Than Just Pipelines
32mHow to fit Sec into DevOps without Security team