DevSecOps for secure development
What's the fundamental difference between DevSecOps approaches and traditional information security practices?
Learn more in our free course "DevSecOps in Cloud CI/CD"
https://cloud.yandex.ru/training/devs...
When information security practices work in the later stages of development, security in Operations plays a far less important role. It often plays a secondary role, slowing down releases. The difference, and one of the main goals of DevSecOps, is security in Development, deep integration of Security practices and DevOps development.
A frequently asked question: "How do I transition from Operations to Development?" The answer is limited to recommendations about finding "Security Ambassadors" among developers.
We'll delve deeper and provide an overview of DevSecOps tasks for each stage of development, in conjunction with their tools. We'll show you common challenges where balancing security and speed is crucial.
On July 12, Yandex Cloud and Hilbert Team experts discussed live:
the differences between DevSecOps and traditional information security;
who needs to implement DevSecOps practices;
the relevance of DevSecOps for business;
the main objectives of the approach;
practices and examples of using DevSecOps during the development and build stages of a project.
The webinar will be of interest to DevOps team leaders, project managers of development and information security departments. You will be able to assess the DevSecOps development roadmap or the maturity of your DevSecOps pipeline. Together, we will set expectations for the expertise of an external team for DevSecOps implementation.
00:00 Intro
02:25 Economics of Development Security
07:02 DevSecOps in Practice
07:50 How to Protect Your SLDC?
08:46 Pre-commit checks
13:53 Pre-build checks
20:32 Post-build checks
24:00 Test-time checks
26:34 Deploy-time checks
28:14 How to protect your infrastructure?
30:05 CIS Benchmarks
31:00 Kubernetes® hardening
37:24 Secret management
40:05 Questions
On this page of the site you can watch the video online DevSecOps for secure development with a duration of hours minute second in good quality, which was uploaded by the user Yandex Cloud 01 January 1970, share the link with friends and acquaintances, this video has already been watched 3,796 times on youtube and it was liked by 124 viewers. Enjoy your viewing!
