DevSecOps but Secure! Developing More Securely, Continuously
summary
The talk explains how DevSecOps enables continuous, secure software delivery by shifting security left in agile development to support cloud-native services. It outlines DevSecOps concepts and methods, and presents a typical toolchain for implementing DevSecOps with guidance on how to choose tools.
AI-written summary · about
chapters (34)
- 0:00Welcome
- 1:15Table of Contents
- 2:10Development vs. Ops
- 4:18Diagram
- 5:04Project Cycle
- 6:56Production
- 9:28Java Components
- 10:25Early Response
- 11:12Regularity
- 12:08Old Insights
- 12:47Security Areas
- 13:44Cloud-Native Development
- 15:25Developer Tools
- 16:30Container Networks
- 17:05Disadvantages
- 18:07Shift Approach
- 18:27Code Quality Tools
- 19:12Practical Problems
- 20:05Rule-Based Governance
- 21:45How to Handle Security Essentials?
- 22:15What Is the Best Approach for the Toolchain?
- 23:44What Are Typical Tools?
- 23:59Managing the Pipeline
- 24:31Best-of-Breed Approach
- 25:33Security Techniques for Dynamic and Static Scanning
- 26:03Development Process
- 27:15Pipeline
- 28:10Security Remains an Important Topic
- 29:20Avoiding Pollution
- 29:49New Agile Manifesto for the Cloud
- 32:18How Do You Present Your Results?
- 33:53Where Do You Currently See Challenges in Companies?
- 37:20Which Tools Help You with That?
- 40:01Why Do We Still Need to Release the Application Server?
related talks
47mCloud Computing: DevSecOps — security all the way
16mIntroduction to DevSecOps
39mDevSecOps: What, Why and How
38mDevSecOps - what does it mean and where is it taking us?
50mSeamless Integration of Security Practices into the DevOps Pipeline
01h 55mDevSecOps from Zero to Hero!
46mDevSecOps: The Hero We Need!
06mDevSecOps is a Misnomer