DevOps and Security: The Facts, The Myths, The Legend
summary
Argues DevOps improves security by shrinking change sets and increasing auditability: cites IBM 1979 research linking smaller, frequent changes to lower complexity; shows automated pipelines (Jenkins-style automated deploy) record exact commits and timestamps to the second; uses Chef and Puppet to enforce configs, detect unauthorized changes and act as CMDB; gives rollback benefit of a 25 lines change versus big service packs; notes large shops use a three-person release team plus automated gates and code review to keep controls intact.
AI-written summary · about
chapters (7)
- 0:00DevOps and Security: The Facts, The Myths, The Legend
- 1:07DevOps Breaks Separation of Duties
- 7:18DevOps Ignores Security
- 9:39C.D. Means Less Secure Code
- 16:00DevOps & ITIL Don't Mix AKA DevOps Has No Process
- 23:50Auditors Hate DevOps
- 30:13Ignore DevOps At Your Own Risk
related talks
39mDevOps: The Return of Security
31mDevOps: You Build It, You Secure It
30mHandling Security Objections to DevOps
32mHell Has Frozen Over: DevOps & Security
04mThe relationship between DevOps and security
01h 02mDevSecOps for Developers: How To Start
16mDevOps and Security
48mDevOps Is Automation, DevSecOps Is People