Download as PDF, PPTX
Uploaded byMichelangelo van Dam
DevOps or DevSecOps
The document discusses the importance of integrating security within the DevOps framework, highlighting the need for 'DevSecOps' in today's development and operations landscape. It emphasizes that each commit and system change must adhere to security standards to prevent risks, data loss, and compliance issues. The author asserts that security cannot be overlooked and should be an integral part of the development process.
DevOps or DevSecOps
- 1. DEVOPS OR DEVSECOPS? Whydo we need to focus on security in development and operations?
- 2. MICHELANGELO VAN DAM I'ma senior #php architect, co-founder and #ceo of @in2itvof, #community leader at @phpbenelux, coach at @CoderDojoBelgium, #MVP, #digitalnomad, likes #coffee. Follow me on Twitter: @DragonBe
- 3. DEVOPS Let’s have alook at DevOps first
- 4. PATRICK DEBOIS Patrick Deboiscoined the term “DevOps” at the first DevOpsDays in Ghent (Belgium) and started a very important movement in the tech industry.
- 5. THE THREE WAYS THEPRINCIPLES UNDERPINNING DEVOPS
- 6. THE THREE WAYS THEPRINCIPLES UNDERPINNING DEVOPS System thinking: performance of complete system
- 7. THE THREE WAYS THEPRINCIPLES UNDERPINNING DEVOPS System thinking: performance of complete system Amplify feedback loops: notify issues early in the process
- 8. THE THREE WAYS THEPRINCIPLES UNDERPINNING DEVOPS System thinking: performance of complete system Amplify feedback loops: notify issues early in the process Culture of continuous learning & experimenting
- 9.
- 10. DEVOPS Unifying software development& operations
- 11. DEVOPS Unifying software development& operations Automation & monitoring of software construction
- 12. DEVOPS Unifying software development& operations Automation & monitoring of software construction Shorter development cycles, increased deployment frequencies & produce dependable releases
- 13.
- 14. DEVELOPMENT & OPERATIONS Projectmanagement & development
- 15. DEVELOPMENT & OPERATIONS Projectmanagement & development Network & systems engineering
- 16. DEVELOPMENT & OPERATIONS Projectmanagement & development Network & systems engineering Security, testing, legal, compliance & support
- 17. DEVELOPMENT & OPERATIONS Projectmanagement, development & testing Network & systems engineering Security, testing, legal, compliance & support
- 18.
- 19.
- 20. AUTOMATION & MONITORING Infrastructureas code Increased telemetry on whole application stack
- 21. AUTOMATION & MONITORING Infrastructureas code Increased telemetry on whole application stack Repeatable processes for continuous improvement
- 22. SHORTER DEVELOPMENT CYCLES,INCREASED DEPLOYMENT FREQUENCIES & DEPENDABLE RELEASES
- 23. SHORTER DEVELOPMENT CYCLES,INCREASED DEPLOYMENT FREQUENCIES & DEPENDABLE RELEASES 10, 100, 1K, 10K commits a day
- 24. SHORTER DEVELOPMENT CYCLES,INCREASED DEPLOYMENT FREQUENCIES & DEPENDABLE RELEASES 10, 100, 1K, 10K commits a day Each N commits results in a deployment (could be 1)
- 25. SHORTER DEVELOPMENT CYCLES,INCREASED DEPLOYMENT FREQUENCIES & DEPENDABLE RELEASES 10, 100, 1K, 10K commits a day Each N commits results in a deployment (could be 1) Each release is better than the previous
- 26. TRUST ME, I’MA PROFESSIONAL Each commit has the potential of introducing a new risk or break the system. Without any safeguards, we’re just increasing the speed of creating a Pandora’s Box.
- 27.
- 28.
- 29. DEVSECOPS Security integrated partof dev & ops
- 30. DEVSECOPS Security integrated partof dev & ops Each commit & systems change must meet security standards
- 31. DEVSECOPS Security integrated partof dev & ops Each commit & systems change must meet security standards Security by design
- 32.
- 33.
- 34.
- 35.
- 36.
- 37.
- 38. SECURITY FOCUS Hackers Data lossprevention
- 39. SECURITY FOCUS Hackers Data lossprevention Privacy protection
- 40. SECURITY FOCUS Hackers Data lossprevention Privacy protection Bad configuration
- 41. SECURITY FOCUS Hackers Data lossprevention Privacy protection Bad configuration Compliance
- 42. SECURITY FOCUS Hackers Data lossprevention Privacy protection Bad configuration Compliance Verified trust
- 43. WHAT’S YOUR OPINION? Raise yourhand if you feel security needs to be emphasised with DevSecOps
- 44. WHAT’S YOUR OPINION? Raise yourhand if you feel security is part of DevOps
- 45. SECURITY IS PARTOF DEVOPS Project management, development & testing Network & systems engineering Security, testing, legal, compliance & support
- 46.
- 47. A TYPICAL BUILDPROCESS
- 48. A TYPICAL BUILDPROCESS
- 49. SECURITY TESTING WITHRIPSTECH Project X 2019-03-02 16:43:11
- 50. SECURITY TESTING WITHBURP SUITE
- 51. SECURITY TESTING WITHARACHNI
- 52.
- 53.
- 54.
- 55. SUMMARY Security integrated partof dev & ops
- 56. SUMMARY Security integrated partof dev & ops TRUE === ($this->DevOps || $this->DevSecOps)
- 57. SUMMARY Security integrated partof dev & ops TRUE === ($this->DevOps || $this->DevSecOps) Security is a MUST: we can no longer ignore it!
- 58.
- 59.
- 60.
- 61.
- 62.
- 63. QUESTIONS? Slides online slideshare.net/DragonBe Leave feedback joind.in/event Contactme twitter.com/DragonBe