DevSecOps - Vom Unikum zur gut geölten Maschine

1. 1 NICOLAS BYL DEVSECOPS VOM UNIKUM ZUR GUT GEÖLTEN MASCHINE
2. 2 INTRODUCTION
3. 3 THE DEVSECOPS CYCLE
4. 4 THE CASTLE ILLUSION
5. 5 THE DEVSECOPS CYCLE
6. 6 THE DEVSECOPS CYCLE
7. 7 SECURE ARCHITECTURE
8. 8 THREAT MODELLING
9. 9 COMPLIANCE
10. 10 PENTESTS
11. 11 THE DEVSECOPS CYCLE
12. 12 DESIGN PATTERNS
13. 13 PRE-COMMIT HOOKS
14. 14 CODE REVIEWS
15. 15 COMMIT SIGNING
16. 16 THE DEVSECOPS CYCLE
17. 17 THE DEPENDENCY ICEBERG
18. 18 AUTOMATION IS KING SOURCE CODE ANALYSIS • FindBugs • SonarQube • SAST • DAST SOURCE CODE ANALYSIS DEPENDENCY ANALYSIS • Maven, npm, ... • Container Images • Operating System Packages UPDATE AUTOMATION • npm audit • Dependabot • Renovate
19. 19 THE DEVSECOPS CYCLE
20. 20 POLICY OVER CHECKLISTS
21. 21 THE KEY TO THE KINGDOM
22. 22 ZERO-TRUST DEPLOYMENT
23. 23 ROLLER COASTER PASSWORDS
24. 24 INVENTORY SCANS
25. 25 FIRE DRILLS & CHAOS ENGINEERING
26. 26 HOW TO GET IN TOUCH nicolas.byl@nexineer.io @ClusterBauer https://www.nexineer.io/career/ WE ARE ALWAYS LOOKING FOR GREAT COLLEAGUES…
27. 27 PATCHING Sicheres Artefakt Artefakt mit bekannter Schwachstelle Scanning Patching