DevSecOps
Security @ the Speed of DevOps Survey: Efforts Still Lag
George V. Hulme | | agile, cloud, continuous integration, devops, processes, report, security, survey, toolsEnterprises today are in a relentless race to digitize or die. If they don’t digitize business processes, services or internal workflows and their competitors do, they will be at a steep disadvantage—and ...
A Modern Database Backup and Recovery Checklist
Do you have single points of failure? How do you handle deduplication? These questions and more need consideration when you're dealing with database backup and recovery. Enterprises are quickly onboarding next-generation, mission-critical ...
Elasticsearch Ransomware Attacks Highlight Need for Better Security
Recently, reports surfaced that a large number of Elasticsearch servers fell victim to potential ransomware attacks. Ransomware is the type of malware a company doesn’t want on its systems or network. It ...
2017 Security Blogger Awards – Open for Voting!
It's another year, and another awards ceremony to come at the Security Blogger Meet-Up at RSA Conference in San Francisco. It's time to vote for your favorite blogs, which were selected solely ...
The Secure Developer Podcast: Continuous Security at Chef
Welcome to The Secure Developer, a podcast about security for developers, covering security tools and practices you can and should adopt into your development workflow. The Secure Developer is hosted by Guy Podjarny, ...
What the Current DDoS Landscape Means for DevOps
contributor | | application layer attacks, DDos, devops, network security, protocol attacks, security, security patches, volume-based attacksBusinesses, governments, hospitals, schools, charities and even individuals—they’re all the same to a DDoS perpetrator. If you have a website, it’s likely to be targeted by a distributed denial of service (DDoS) ...
Lance Crosby’s Vision To Bring Scale, Speed and Security To Developers with StackPath
The last most of us heard from Lance Crosby we thought he was riding off to an island sunset, to bask in the glow of a very successful exit from SoftLayer. The ...
DevOps Lessons from the Dyn Attack Fiasco
Chris Tozzi | | DDos, devops, DNS servers, dyn, Internet of Things, IoT, microservices, security, websitesDyn's DNS servers suffered a major DDoS attack last week, slowing a host of major websites. Does the drive for DevOps automation increase the risk of similar attacks? Maybe, but it doesn't ...
Network Resilience and Security from A to Z
contributor | | application behavior, applications, cyberattack, developers, development cycle, security, software bugs, testingAn observer watching a bunker shot by legendary pro golfer Gary Player was heard to say: “I’ve never seen anyone so lucky in my life.” The player retorted: “Yes, and the more ...
Empower Developers to Build Security into DevOps
contributor | | CI/CD, continous deployment, continuous integration, developers, infrastructure as code, securityOver the past 10 years, as more organizations have made the transition to DevOps, there has been a cultural shift in which security and development teams agree quality is a priority. Yet, ...
Fixing Flaws: Bridging InfoSec and DevOps
The Road to Creating More Secure Code and Interlocking two Traditionally Distinct Practices As DevOps continues to expand across verticals, including the financial and government sectors, security has become paramount in the ...
Top 5 DevOps Practices to Improve Security in Engineering
We’ve all been there ... A new application or feature needs to be deployed yesterday and the last thing anyone wants to do is address security requirements. On the flip side, the ...
