DevSecops: Defined, tools, characteristics, tools, frameworks, benefits and challenges

DevSecops: Defined, tools, characteristics, tools, frameworks, benefits and challenges

• 1.
  DevSecOps A.R.M. NIZZAD CTO |SENIOR LECTURER | RESEARCHER | SOFTWARE ENGINEER | DIGITAL MEDIA STRATEGIST | TECHNICAL W RITER | FREELANCER
• 2.
  Outline DevOps DevSecOps CharacteristicsPractices Benefits Implementation Challenges
• 3.
  DevOps DevOps is aset of practices that works to automate and integrate the processes between software development and IT teams, so they can build, test, and release software faster and more reliably
• 4.
  DevSecOps DevSecOps is afurther development of the DevOps concept that, besides automation, addresses the issues of code quality and reliability assurance.
• 5.
  DevSecOps Characteristics DevOps CultureAutomation Measurement Sharing
• 6.
  DevSecOps Practices • Threatmodeling and risk assessments • Continuous testing • Monitoring and logging • Security as code • Red-Team and security drills
• 7.
  Benefits of Implementing DevSecOpsSHIFTING SECURITY TOTHE LEFT AUTOMATING SECURITY VALUE
• 8.
  Implementing DevSecOps Different Securityimplementation models have been proposed by researchers and experts in the field of Security with respect to DevSecOps. • Three pillars of a DevSecOps model • OWASP DevSecOps Maturity Model • Deloitte’s transformational pillars in DevSecOps
• 9.
  Three pillars ofa DevSecOps model • Test-driven security • Monitoring and responding to attacks • Assessing risks and maturing security
• 10.
  OWASP DevSecOps MaturityModel LEVEL 1: BASIC UNDERSTANDING OF SECURITY PRACTICES LEVEL 2: ADOPTION OF BASIC SECURITY PRACTICES LEVEL 3: HIGH ADOPTION OF SECURITY PRACTICES LEVEL 4: ADVANCED DEPLOYMENT OF SECURITY PRACTICES AT SCALE
• 11.
  Deloitte’s transformational pillarsin DevSecOps Governance People Technology Process
• 12.
  Challenges in implementing DevSecOpsKEEPING UPWITH DEVOPS ORGANIZATIONAL CHALLENGES TOOLS AND PRACTICES
• 13.
  DevOps is nota Goal, But a never-ending process of continual Improvement Thank you