DevSecOps
DevOps in the Cloud: Security’s Groundhog Day
Throughout the internet age, enterprise IT has given security a lower priority than qualities such as speed-to-deployment, scalability, availability and usability. We first saw this in the late 1990s and early 2000s, ...
DevOps Chat: ASRTM for DevOps with Rohit Sethi, Security Compass
In this DevOps/Security Boulevard Chat we speak with Rohit Sethi, COO of Security Compass about ASRTM, which stands for Application Security Requirements and Threat Management. Gartner has recently released a hype cycle ...
How Developers Can Take a More Proactive Approach to Security
Developers tend to get thrown under the bus when it comes to application security, but recent data shows that developers do, in fact, care about security. Take mitigation for example. Developers don’t ...
Predictions for DevOps Security in 2018
Automation continues to be a major driver of DevOps as a whole. In 2018, we’ll continue to see a shift in how and where automation is applied in the DevOps life cycle ...
Are Your Web Applications Prepared for the Holidays?
Three best practices to secure your website for the coming retail boom The holidays are upon us, which means retailers are racing to launch new promotions, sales and other temporary web pages ...
Moving Security Beyond SSH and PKI
contributor | | BeyondCorp, credentials, data security, ephemeral client certificates, IT security, PKI, PKI certificates, security, SSH, zero-trustSSH (secure shell) is still the most common method of remotely accessing a Linux server, which makes it a common target for attackers attempting to infiltrate corporate networks. While the protocol itself ...
Trend Micro Expands DevSecOps Portfolio
Mike Vizard | | AWS, container image scanning, developers, devsecops, illumio, re:Invent 2017, security policy engine, security products, software, Trend MicroAt the AWS re:Invent 2017 conference today, Trend Micro significantly expanded its reach into DevSecOps by announcing it has acquired Immunio, a provider of agent software that can be employed on a central ...
Barracuda Networks Advances DevSecOps Agenda
Mike Vizard | | Barracuda Networks, Barracuda NextGen Firewall, Barracuda Web Application Firewall, devsecops, puppet labs, rugged devops, securityThanks to the rise of DevOps, a fundamental shift is now underway in terms of the amount of influence developers exercise across the enterprise. Rather than simply dumping code on IT operations ...
Cloud Services Demand Security Up the DevOps Stack
contributor | | application security, cloud services, customer trust, devops, Devops and Security, devsecops, SaaS, software as a serviceIn the era of soaring use of public cloud by companies, software delivery is moving away from an on-premises install approach to a cloud-based subscription model through software as a service (SaaS) ...
DevSecOps: Security Needn’t be Sacrificed for Speed
Stephen Withers | | code, continuous testing, developers, devops, devsecops, qualys, security, Sense of Security, Sonatrype, Veracode, vulnerability scansWith the right practices, security needn't be an impediment to continuous development and rapid improvement. The same cycle keeps repeating, according to IT security and risk management consultancy Sense of Security co-founder ...
DevSecOps: IoT Right and Nobody Dies
Derek E. Weeks | | continuous, devsecops, Food and Drug Administration, lifecycle, medical devices, Nexus, sonatypeDr. Suzanne Schwartz, CDRH Associate Director for Science and Strategic Partnerships at the Food and Drug Administration (FDA), recently released a blog to update us on the FDA’s role in medical device cybersecurity ...
Bringing Balance To The Force Between DevOps And Security
Let's not kid ourselves—I am not sure there ever has been balance among Dev, Ops and security. But with the advent of DevOps, automation and the cloud, whatever balance there was between ...
