Open Source AppSec Review: how to perform acceptance, deployment and hardening of a solution
summary
A practical guide to evaluating, adopting, and hardening open-source application security solutions, focusing on processes for acceptance (review), deployment, and operational hardening. It discusses using widely adopted OSS tools (examples referenced include Kubernetes, OpenStack, Prometheus, Grafana) and practical steps for integrating them securely into production environments.
AI-written summary · about
chapters (5)
- 0:00Welcome
- 3:06Open Source security issues
- 10:48Container security sins
- 19:59Open Source acceptance
- 26:47Q&A
related talks
08mRunning an Appsec Program with Open Source Projects"
35mOpen source security: Opportunity or oxymoron?
28mOpen Source: Open Choice – A DevOps Guide for OSS Adoption
41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...
38mOpen-Source - Open Choice: A DevOps Guide for OSS Adoption
29mOpen-Source: Open Choice - A DevOps Guide for OSS Adoption
26mOpenSec and Why WebAppSec Matters
13mEffective Application Security Testing for DevOps
