DevSecOps March 2018 - Extract

•Download as PPTX, PDF•

0 likes•58 views

Michael Man

Elements to consider for practicing DevSecOps.

Technology

Dev Workstation Build Server
Centralize Report (Vulnerability Management) Server
SCM
Static Code Analysis
(SAST)
Dynamic Testing
(DAST)
Interactive Testing
(IAST)
Open Source Component Security
Manual Penetration Testing – Out of Band
Scope: Application and Network layer – White/Black box
Defect
Management
AUTOMATION
INTEGRATION POINTS
SECURITYASSURANCEMODEL
Legend
Black Box: Development Stack
Blue Box: Automation - Integration
Red Box: Security Tools and Controls
Infrastructure Scanning

Recently uploaded

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...Neo4j

Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationSafe Software

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh

Pigging Solutions Piggable Sweeping ElbowsPigging Solutions

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Scaling API-first – The story of a global engineering organizationRadu Cotescu

08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

Slack Application Development 101 Slidespraypatel2

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Key Features Of Token Development (1).pptxLBM Solutions

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

AI as an Interface for Commercial BuildingsMemoori

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix

Recently uploaded (20)

Neo4j - How KGs are shaping the future of Generative AI at AWS Summit London ...

Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation

Handwritten Text Recognition for manuscripts and early printed texts

08448380779 Call Girls In Civil Lines Women Seeking Men

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi

Pigging Solutions Piggable Sweeping Elbows

04-2024-HHUG-Sales-and-Marketing-Alignment.pptx

Scaling API-first – The story of a global engineering organization

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

IAC 2024 - IA Fast Track to Search Focused AI Solutions

[2024]Digital Global Overview Report 2024 Meltwater.pdf

A Domino Admins Adventures (Engage 2024)

Factors to Consider When Choosing Accounts Payable Services Providers.pptx

Slack Application Development 101 Slides

Unblocking The Main Thread Solving ANRs and Frozen Frames

Key Features Of Token Development (1).pptx

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service

AI as an Interface for Commercial Buildings

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Swan(sea) Song – personal research during my six years at Swansea ... and bey...