Details for this torrent 

Sehgal V. Implementing DevSecOps Practices...2023
Type:
Other > E-books
Files:
1
Size:
12.2 MiB (12793502 Bytes)
Uploaded:
2024-01-23 13:02 GMT
By:
andryold1
Seeders:
43
Leechers:
3

Info Hash:
DED6935D023C69ED03A40448C56ED95812B29844




Textbook in PDF format

Key Features
• Understand security posture management to maintain a resilient operational environment
• Master DevOps security and blend it with software engineering to create robust security protocols
• Adopt the left-shift approach to integrate early-stage security in DevSecOps
Book Description
This book will help you get to grips with DevSecOps and show you how to implement it, starting with a brief introduction to DevOps, DevSecOps, and their underlying principles.
After understanding the principles, you'll dig deeper into different topics concerning application security and secure coding before learning about the secure development lifecycle and how to perform threat modeling properly. You’ll also explore a range of tools available for these tasks, as well as best practices for developing secure code and embedding security and policy into your application. Finally, you'll look at automation and infrastructure security with a focus on continuous security testing, infrastructure as code (IaC), protecting DevOps tools, and learning about the software supply chain.
By the end of this book, you’ll know how to apply application security, safe coding, and DevSecOps practices in your development pipeline to create robust security protocols.
What you will learn
• Find out how DevSecOps unifies security and DevOps, bridging a significant cybersecurity gap
• Discover how CI/CD pipelines can incorporate security checks for automatic vulnerability detection
• Understand why threat modeling is indispensable for early vulnerability identification and action
• Explore chaos engineering tests to monitor how systems perform in chaotic security scenarios
• Find out how SAST pre-checks code and how DAST finds live-app vulnerabilities during runtime
• Perform real-time monitoring via observability and its criticality for security management
Who this book is for
This book is for DevSecOps engineers and application security engineers. Developers, pentesters, and information security analysts will also find plenty of useful information in this book. Prior knowledge of the software development process and programming logic is beneficial, but not required.
Table of Contents
1. Introducing DevSecOps
2. DevSecOps Principles
3. Understanding the Security Posture
4. Understanding Observability
5. Understanding Chaos Engineering
6. Continuous Integration and Continuous Deployment
7. Threat Modeling
8. Software Composition Analysis (SCA)
9. Static Application Security Testing (SAST)
10. Infrastructure-as-Code (IaC) Scanning
11. Dynamic Application Security Testing (DAST)
12. Setting Up a DevSecOps Program with Open Source Tools
13. Licenses Compliance, Code Coverage, and Baseline Policies