Using the Hacker Persona to Build Your DevSecOps Pipeline
summary
Describes using hacker personas to inform a defense-in-depth DevSecOps pipeline for government/military mission-critical systems. Focuses on creating attacker profiles to guide secure pipeline design and capability hardening within DevSecOps practices; assumes basic DevSecOps knowledge.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:49Why DevOps
- 5:16Threat Modeling
- 6:39DevOps Pipeline Threat Model
- 7:42Attack Surfaces in the pipeline
- 8:54Defining Persona's
- 10:40Why Hacker Personas?
- 13:41Intelligence Sources
- 14:40FBI cyber most wanted
- 15:13Careless Developer
- 17:12Malicious Developer
- 20:29Advanced Persistent Threat (APT)
- 23:51USING PERSONAS
- 27:56Hacker Persona Benefits
- 30:48Positive Shifts
- 34:04"Lessons" on Personas
- 35:58Future
related talks
30mDevSecOps: How Secure Is Your Pipeline?
48mFrom Developer to Hacker: Knowing How to Break Is Knowing How to Protect ⚔️
30mDevSecOps: More Than Just Pipelines
30mHandling Security Objections to DevOps
50mSeamless Integration of Security Practices into the DevOps Pipeline
31mWhy SecDevOps is the new way in Cybersecurity?
46mDevSecOps: The Hero We Need!
16mIntroduction to DevSecOps