Hands-On Security in Devops: Ensure Continuous Security, Deployment, and Delivery With Devsecops (in English)
Synopsis "Hands-On Security in Devops: Ensure Continuous Security, Deployment, and Delivery With Devsecops (in English)"
Protect your organization's security at all levels by introducing the latest strategies for securing DevOpsKey FeaturesIntegrate security at each layer of the DevOps pipelineDiscover security practices to protect your cloud services by detecting fraud and intrusionExplore solutions to infrastructure security using DevOps principlesBook DescriptionDevOps has provided speed and quality benefits with continuous development and deployment methods, but it does not guarantee the security of an entire organization. Hands-On Security in DevOps shows you how to adopt DevOps techniques to continuously improve your organization’s security at every level, rather than just focusing on protecting your infrastructure.This guide combines DevOps and security to help you to protect cloud services, and teaches you how to use techniques to integrate security directly in your product. You will learn how to implement security at every layer, such as for the web application, cloud infrastructure, communication, and the delivery pipeline layers. With the help of practical examples, you’ll explore the core security aspects, such as blocking attacks, fraud detection, cloud forensics, and incident response. In the concluding chapters, you will cover topics on extending DevOps security, such as risk assessment, threat modeling, and continuous security.By the end of this book, you will be well-versed in implementing security in all layers of your organization and be confident in monitoring and blocking attacks throughout your cloud services.What you will learnUnderstand DevSecOps culture and organizationLearn security requirements, management, and metricsSecure your architecture design by looking at threat modeling, coding tools and practicesHandle most common security issues and explore black and white-box testing tools and practicesWork with security monitoring toolkits and online fraud detection rulesExplore GDPR and PII handling case studies to understand the DevSecOps lifecycleWho this book is forHands-On Security in DevOps is for system administrators, security consultants, and DevOps engineers who want to secure their entire organization. Basic understanding of Cloud computing, automation frameworks, and programming is necessary.Table of ContentsDevSecOps Drivers and ChallengesSecurity Goal and MetricsSecurity Assurance Program and OrganizationSecurity Requirements and ComplianceCase Study: Security Assurance ProgramSecurity Architecture, Common Modules Framework, Design PrinciplesThreat modeling Practices & Secure DesignSecure Coding Baseline, Tools and Best PracticesCase Study: Continuous releases with security by defaultSecurity Testing Plan and CasesWhiteBox Testing TipsSecurity Testing toolkitsAutomation - Key to built-in security CI pipelineIncident ResponseSecurity MonitoringSecurity Scanning for new Releases releasesThreat Inspection and IntelligenceBusiness Fraud, Accounts and Services Abuses detectionGDPR compliance case studyDevSecOps Challenges, Tips and FAQ
