Practical DevSecOps: The Simple Free Pipeline Anyone Can Create

No ratings

Presented at InfoSecurityEurope 2019 by

Jeff Williams

After this talk, you'll be able to establish your own DevSecOps pipeline immediately. This reference implementation can be adapted easily to almost any tools and processes - even legacy applications and waterfall style projects.Learning Outcomes:We will enable developers with real-time security feedback right in their IDEWe will also ensure that libraries are frameworks are analysed continuously for vulnerabilitiesWe'll integrate security into the CI/CD process so that we can easily fail a buildWe'll identify application layer attacks and create a whole new level of visibility for your SOCWe'll even prevent exploitation of newly discovered vulnerabilities in open source libraries