DevOpsPorto Meetup6: Security in the wild by Renato Rodrigues

Talk delivered by Renato Renato Rodrigues

Transcript

1. Security in the wild
   By Renato Rodrigues
   

   View Slide

2. Who Am I
   Renato Rodrigues - -
   @simpsOn //pathonproject..com
   

   View Slide

3. Agenda
   The world as we know it
   Facing the world
   Survival mode
   

   View Slide

4. The world as we know it
   Implementation of new features
   New technology hype(s)
   Distorted notion of time
   New issues arise every day
   Security is not part of the process!
   

   View Slide

5. Facing the world
   Software Dev. Life Cycle
   

   View Slide

6. Requirements
   Who is going to use the system?
   How will they use the system?
   What data should be input into the system?
   What data should be output by the system?
   Requirement Specification document
   

   View Slide

7. Requirements
   Product Team
   Security Perceptions
   Security Work
   Improvements
   

   View Slide

8. Design
   System Design helps in:
   - specifying hardware and system requirements;
   - defining overall system architecture (interactions,
   structures, technologies,...).
   Implementation and Support Documentation
   

   View Slide

9. Design
   Architecture Teams
   Security Perceptions
   Security Work
   Improvements
   

   View Slide

10. Code
    The work is divided into modules/units and actual
    coding is started. During this phase, the code should
    be the developer's main focus.
    Real Product
    

    View Slide

11. Code
    Development Teams
    Security Perceptions
    Security Work
    Improvements
    

    View Slide

12. Testing
    After code development, it is necessary to test it against the
    requirements to verify that the product addresses the needs
    collected during the requirements stage.
    Product Validation!
    

    View Slide

13. Testing
    QA Teams
    Security Perceptions
    Security Work
    Improvements
    

    View Slide

14. Deployment
    After successful testing, the product can finally be
    delivered/deployed to the customer.
    Live to the world!
    

    View Slide

15. Deployment
    DevOps Teams
    Security Perceptions
    Security Work
    Improvements
    

    View Slide

16. S. Software Dev. Life Cycle
    

    View Slide

17. Thank you for your time!
    Renato Rodrigues - -
    @simpsOn //pathonproject..com
    

    View Slide