DevSecOps — Why It Matters and Where to Start
summary
Introduces OWASP and common application security risks, then shows how to protect .NET applications and how to organize repeatable, reproducible DevSecOps processes so security measures can be applied across projects.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:27Technical debt
- 7:26What is DevSecOps
- 11:18App security level
- 13:04OWASP tools
- 16:38STRIDE threat model
- 19:49Microsoft Threat Modeling Tool demo
- 30:36Security in build stage
- 34:29SonarQube Snyk WhiteSource demo
- 47:29Security in infra deployment
- 54:13Security monitoring
- 55:38Q&A
related talks
16mIntroduction to DevSecOps
39mDevSecOps: What, Why and How
49mDevSecOps but Secure! Developing More Securely, Continuously
01h 55mDevSecOps from Zero to Hero!
38mDevSecOps - what does it mean and where is it taking us?
06mDevSecOps is a Misnomer
34mDevSecOps: How to Use DevOps to Make You More Secure
13mEffective Application Security Testing for DevOps