Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

DevSecOps - Vom Unikum zur gut geölten Maschine

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Nicolas Byl Nicolas Byl
December 08, 2021
Technology
130
0

DevSecOps - Vom Unikum zur gut geölten Maschine

Avatar for Nicolas Byl

Nicolas Byl

December 08, 2021

More Decks by Nicolas Byl

See All by Nicolas Byl
Platform Engineering ❤️ Developer Experience
Avatar for Nicolas Byl nbyl
0
71
Die Flucht aus der Prototypen-Hölle
Avatar for Nicolas Byl nbyl
0
65
Lean Prototyping for Industrial-IoT Projects
Avatar for Nicolas Byl nbyl
0
87
Securing your software supply chain
Avatar for Nicolas Byl nbyl
0
410
Keeping-Up-WithUpstream.pdf
Avatar for Nicolas Byl nbyl
0
200
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
Avatar for Nicolas Byl nbyl
0
160
Securing the "other" supply chain
Avatar for Nicolas Byl nbyl
0
350
Kubernetes - Auf die Cluster, Fertig, Los!
Avatar for Nicolas Byl nbyl
0
230
Helm - Kubernetes Deployments richtig gemacht
Avatar for Nicolas Byl nbyl
0
160

Other Decks in Technology

See All in Technology
Code for Security プロジェクト紹介 2026年10月
Avatar for Yuki Kawabe yu23ki14
0
120
LambdaWebFunctionsを試してみた / exploring-lambda-web-functions
Avatar for koukihosaka koukihosaka
1
370
触りたくないデータに、どう触るか AI時代のRBACアクセスガバナンス
Avatar for 株式会社IVRy（社員登壇資料） ivry_presentationmaterials
0
300
React改造してみた
Avatar for Mooncake Sugar tsukina_7mochi
0
140
「エーアイ」をバズワードにしないために RPA 導入経験と Kiro 上での Claude モデル利用経験から
Avatar for kazzpapa3 kazzpapa3
0
110
~最速でビジネスインパクトを創出する~ Sansanのデータ基盤と活用事例
Avatar for SansanTech sansantech
PRO
0
110
野蛮なアジャイル ［サイボウズ発！］組織の常識を覆した反骨のスクラム実践記 / Barbaric Agile - Enterprise Agile Study Group
Avatar for ama-ch ama_ch
0
120
DBについての基礎説明（MySQL編） - コロプラ 2026年度 新卒研修
Avatar for COLOPL Inc. colopl
0
150
AIにシークレットを見せない、WSL2で安全な開発環境
Avatar for yazm4 yazm
0
320
トークン化預金DCJPYの取り組みと活用ユースケース
Avatar for フィンテック養成コミュニティ finengine
0
200
AI コーディングと人間の認知スループット / CTO Night & Day 2026 Morning Session / AI Coding and Human Cognitive Throughput
Avatar for Tamirlan 893 Torgayev prog893
5
1.4k
Benchmarking Disaggregated Serving on vLLM + Dynamo with a Real Coding-Agent Workload
Avatar for NTT docomo Business nttcom
1
210

Featured

See All Featured
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
464
34k
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
51
53k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
1.3k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1.6k
[Rails World 2026] Durable orchestration on Rails: from continuation to workflow
Avatar for Vladimir Dementyev palkan
1
830
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
184
10k
Hiding What from Whom? A Critical Review of the History of Programming languages for Music
Avatar for Tomoya Matsuura tomoyanonymous
3
1.4k
So, you think you're a good person
Avatar for Per Axbom axbom
PRO
2
2.2k
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
2
540

Transcript

  1. 1 NICOLAS BYL DEVSECOPS VOM UNIKUM ZUR GUT GEÖLTEN MASCHINE

  2. 2 INTRODUCTION

  3. 3 THE DEVSECOPS CYCLE

  4. 4 THE CASTLE ILLUSION

  5. 5 THE DEVSECOPS CYCLE

  6. 6 THE DEVSECOPS CYCLE

  7. 7 SECURE ARCHITECTURE

  8. 8 THREAT MODELLING

  9. 9 COMPLIANCE

  10. 10 PENTESTS

  11. 11 THE DEVSECOPS CYCLE

  12. 12 DESIGN PATTERNS

  13. 13 PRE-COMMIT HOOKS

  14. 14 CODE REVIEWS

  15. 15 COMMIT SIGNING

  16. 16 THE DEVSECOPS CYCLE

  17. 17 THE DEPENDENCY ICEBERG

  18. 18 AUTOMATION IS KING SOURCE CODE ANALYSIS • FindBugs •

    SonarQube • SAST • DAST SOURCE CODE ANALYSIS DEPENDENCY ANALYSIS • Maven, npm, ... • Container Images • Operating System Packages UPDATE AUTOMATION • npm audit • Dependabot • Renovate

  19. 19 THE DEVSECOPS CYCLE

  20. 20 POLICY OVER CHECKLISTS

  21. 21 THE KEY TO THE KINGDOM

  22. 22 ZERO-TRUST DEPLOYMENT

  23. 23 ROLLER COASTER PASSWORDS

  24. 24 INVENTORY SCANS

  25. 25 FIRE DRILLS & CHAOS ENGINEERING

  26. 26 HOW TO GET IN TOUCH [email protected] @ClusterBauer https://www.nexineer.io/career/ WE

    ARE ALWAYS LOOKING FOR GREAT COLLEAGUES…

  27. 27 PATCHING Sicheres Artefakt Artefakt mit bekannter Schwachstelle Scanning Patching