Hsu Practical Security Automation and Testing

Tools and techniques for automated security scanning and testing in DevSecOps
1. Auflage 2019
ISBN: 978-1-78961-169-4
Verlag: De Gruyter
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 256 Seiten

No detailed description available for "Practical Security Automation and Testing".

Autoren/Hrsg.

Hsu, Tony Hsiang-Chih

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Systemverwaltung & Management
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Software Engineering

Inhaltsverzeichnis

Table of Contents - The Scope and Challenges of Security Automation
- Integrating Security and Automation
- Secure Code Inspection
- Sensitive Information and Privacy Testing
- Security API and Fuzz Testing
- Web Application Security Testing
- Android Security Testing
- Infrastructure Security
- BDD Acceptance Security Testing
- Project Background and Automation Approach
- Automated Testing for Web Applications
- Automated Fuzz API Security Testing
- Automated Infrastructure Security
- Managing and Presenting Test Results
- Summary of Automation Security Testing Tips

Über Autor(innen)

Hsu Tony Hsiang-Chih:

Tony Hsiang-Chih Hsu is a senior security architect, software development manager, and project manager with more than 20 years' experience in security services technology. He has extensive experience of the Secure Software Development Lifecycle (SSDLC) in relation to activities including secure architecture/design review, secure code review, threat modeling, automated security testing, and cloud service inspection. He is also an in-house SDL trainer, having offered hands-on courses totaling in more than 300 hours. He is also the author of Hands-on Security in DevOps, and a co-author of several Open Web Application Security Project (OWASP) projects, including the OWASP testing guide, a proactive control guide, deserialization, cryptographic, and the XXE prevention cheatsheet.