Starting Involving Security In SDLC Process

1. Starting Involving Security
In SDLC Process
Sandi Ardiyansah
sandyQx@gmail.com
Enterprise Architecture Manager at PT. Alto Network

2. Technology Journey

3. What is Software Development Life Cycle (SDLC) ?
1: Planning and Requirement Analysis
2: Defining Requirements and Technology
3: Designing Infrastructure & Architecture
4: Building or Developing the Product
5: Testing the Product
6: Deployment in the Market and Maintenance

4. Why My Application must be secure?

5. Common Critical Vulnerabilities
Server Application
Network Protocol Stack
Communication Protocol
Hardware
Operating System
Non Server Applications
Other
Source : NIST

6. Common Critical Vulnerabilities

7. Impact Of Security Flaw
• Unbudgeted time to fix security problems
• Time To launch Product
• Cost To recovery Security Flaw

8. So How We Can Start?
Technology
Process
People
Awareness
Policy &
Procedure
Tools &
Implementation

9. Injecting Security in SDLC Process

10. Automate Security in SDLC Process
injecting Security in all aspect of SDLC Process with Automation in Jenkins Pipeline

11. Monitoring Security in Production

12. Thank You
Sandi Ardiyansah
sandyQx@gmail.com
Enterprise Architecture Manager at PT. Alto Network