The path to agile DevSecOps – a holistic approach of automation, orchestration and correlation
summary
Claims a concrete pipeline: use SAST + SCA + dynamic checks then correlate findings so true positives bubble to the top, with delta scans giving developers minute‑scale feedback. Cites deployment rates (Amazon ~11.6s, Facebook 50–60k/day) to justify scale, prescribes a five‑phase policy→identify→remediate→monitor→enable flow, recommends machine‑learning for intelligent remediation, and proposes hybrid provisioning with a kickstart phase to tune rules so automation actually works.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:20Software Exposure
- 6:40Policy Management
- 7:26Static Assessments
- 8:02Static Code
- 10:37Open Source Components
- 11:20Dynamic Testing
- 14:03Automated Testing
- 15:25Security Assessments
- 16:24AI
- 19:14Dev enablement
- 20:04Management
- 21:26Automation
- 24:03Hybrid Delivery
- 26:23Outro
related talks
40mDevSecOps Guide to Bulletproof Your Development Workflow
13mUnderstanding DevSecOps: Risk defense across your SDLC
37mDevSecOps Guide to Bulletproof Your Development Workflow
30mDevSecOps: More Than Just Pipelines
32mHow to fit Sec into DevOps without Security team
45mLessons From DevOps: Taking DevOps Practices Into Your AppSec Life
27mSecurity Learns to Sprint: DevSecOps
31mDevSecOps, or How to Integrate Security into DevOps Practices