Hsu Hands-On Security in DevOps

Ensure continuous security, deployment, and delivery with DevSecOps
1. Auflage 2018
ISBN: 978-1-78899-241-1
Verlag: De Gruyter
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 356 Seiten

No detailed description available for "Hands-On Security in DevOps".

Autoren/Hrsg.

Hsu, Tony Hsiang-Chih

Hsu, Tony

Fachgebiete

• Mathematik | Informatik EDV | Informatik Business Application Unternehmenssoftware
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Systemverwaltung & Management

Inhaltsverzeichnis

Table of Contents - DevSecOps Drivers and Challenges
- Security Goal and Metrics
- Security Assurance Program and Organization
- Security Requirements and Compliance
- Case Study: Security Assurance Program
- Security Architecture, Common Modules Framework, Design Principles
- Threat modeling Practices & Secure Design
- Secure Coding Baseline, Tools and Best Practices
- Case Study: Continuous releases with security by default
- Security Testing Plan and Cases
- WhiteBox Testing Tips
- Security Testing toolkits
- Automation - Key to built-in security CI pipeline
- Incident Response
- Security Monitoring
- Security Scanning for new Releases releases
- Threat Inspection and Intelligence
- Business Fraud, Accounts and Services Abuses detection
- GDPR compliance case study
- DevSecOps Challenges, Tips and FAQ

Über Autor(innen)

Hsu Tony Hsiang-Chih:

Tony Hsiang-Chih Hsu is a senior security architect, software development manager, and project manager with more than 20 years' experience in security services technology. He has extensive experience of the Secure Software Development Lifecycle (SSDLC) in relation to activities including secure architecture/design review, secure code review, threat modeling, automated security testing, and cloud service inspection. He is also an in-house SDL trainer, having offered hands-on courses totaling in more than 300 hours. He is also the author of Hands-on Security in DevOps, and a co-author of several Open Web Application Security Project (OWASP) projects, including the OWASP testing guide, a proactive control guide, deserialization, cryptographic, and the XXE prevention cheatsheet.