Security, Don't Fear the DevOps
summary
Uses State of DevOps Report 2017 data: high performers deploy 46× more frequently, have lead times minutes to under an hour vs weeks in low performers, recover 96× faster and see 5× lower change failure rates. Lists practical controls that work: continuous delivery with test and deployment automation, CI and trunk-based development, version control, automated provisioning, dependency scanners and static analysis (Brakeman, RuboCop, ShellCheck). Reports measurable wins — 50% less time remediating incidents and more engineering time for new work.
AI-written summary · about
chapters (35)
- 0:00Intro
- 0:15Bill Weiss
- 0:58Dev Ops Security
- 1:35Why it matters
- 2:02The Big Delta
- 4:25Continuous Delivery
- 5:10Test Automation
- 5:42Integration Security Delivery
- 6:00Continuous Integration
- 6:15Version Control
- 7:19Engineers
- 7:48DevOps
- 8:26Culture
- 9:40Security
- 13:20Puppet
- 13:36Automation
- 14:12Security Concerns
- 15:10Static Analysis
- 18:25Dont Fail
- 20:21Automated Dependencies
- 21:26Open Source Licenses
- 21:44Automation for DevOps
- 22:37Automated Configuration
- 23:02Reproducible provisioning
- 23:46Make assertions
- 24:11Lean
- 24:52Process Right
- 25:07Cyber Kill Chain
- 25:53Security Teams
- 26:05Disasters
- 26:24Metrics
- 30:24Be Human
- 31:04Tabletop Exercises
- 31:54Nobodys Alright
- 32:05Less Security Bugs
related talks
05mInterview
34mDevOps: Next
31mThe Data Behind DevOps: What Does It Take To...
47mWhere the Security Rubber Meets the DevOps Road
45mDevOps: The Key to IT Performance
39mDevOps: The Return of Security
58mWhy Infosec Needs Rugged DevOps Now: A Study Of High Performing IT Organizations
47mWhy We Need DevOps Now: A Fourteen Year Study Of High Performing IT Organizations