Effective Application Security Testing for DevOps
summary
Describes integrating application security into DevOps build pipelines, covering technical measures (security testing tools and processes) and the political/organizational work needed for adoption. Focuses on practical approaches to make security part of developers’ automated workflows and team practices.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:23DevOps Is Coming!
- 1:26Security Advantages: Auditability
- 1:56Security Advantages: Automation
- 2:22Security Advantages: Collaboration
- 2:53Use This Transition to Your Advantage
- 4:49So What Does Application Security Want?
- 6:44How Do We Make This a Reality?
- 7:42Application Security Testing in CI/CD Pipelines
- 8:30Security People Love Policies
- 9:31Effective Application Security Testing
- 10:00Testing Tradeoffs
- 10:56Decision-Making Factors
- 11:31Reporting Recommendations
- 12:09Applying In Your Organization
related talks
42mA practical approach to DevSecOps
26mBeyond Testing: Application Security in the Age of DevOps
50mSeamless Integration of Security Practices into the DevOps Pipeline
30mDevSecOps: How Secure Is Your Pipeline?
27mSecurity testing in Devops friend or foe
46mHow to Harness Dev and Their Native Tools to Accelerate DevSecOps
31mDevOps: You Build It, You Secure It
06mDevSecOps – Security Throughout the DevOps Pipeline