Upgrade to Pro — share decks privately, control downloads, hide ads and more …

DevSecOps - Vom Unikum zur gut geölten Maschine

Avatar for Nicolas Byl Nicolas Byl
December 08, 2021
Technology
120
0

DevSecOps - Vom Unikum zur gut geölten Maschine

Avatar for Nicolas Byl

Nicolas Byl

December 08, 2021

More Decks by Nicolas Byl

See All by Nicolas Byl
Platform Engineering ❤️ Developer Experience
Avatar for Nicolas Byl nbyl
0
65
Die Flucht aus der Prototypen-Hölle
Avatar for Nicolas Byl nbyl
0
61
Lean Prototyping for Industrial-IoT Projects
Avatar for Nicolas Byl nbyl
0
77
Securing your software supply chain
Avatar for Nicolas Byl nbyl
0
400
Keeping-Up-WithUpstream.pdf
Avatar for Nicolas Byl nbyl
0
200
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
Avatar for Nicolas Byl nbyl
0
160
Securing the "other" supply chain
Avatar for Nicolas Byl nbyl
0
340
Kubernetes - Auf die Cluster, Fertig, Los!
Avatar for Nicolas Byl nbyl
0
220
Helm - Kubernetes Deployments richtig gemacht
Avatar for Nicolas Byl nbyl
0
150

Other Decks in Technology

See All in Technology
PM領域でのAI Agentの活用
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
280
WAF 運用改善の承認サイクル/SRE_BizReach_MIXI_1
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
1
350
Kiro Crewしか勝たん！？
Avatar for Kazuki Miura miu_crescent
PRO
0
190
エンタープライズInnerSourceと開発者ポータル
Avatar for Kazuma Nogi nogikazuma
1
110
こんなアーキテクチャ図は嫌だ BEYOND THE TIME: 半年後の自分へ贈る15のメッセージ / 15 of Anti-pattern in AWS Architecture Diagrams
Avatar for Naomi Yamasaki naospon
3
260
PfEingのアプローチで働こう
Avatar for rin（林晃 / Akira Hayashi） rindrics
0
190
ブラウザアプリの継続的パフォーマンスモニタリング (序) / Continuous Browser Application Performance Monitoring; Act 1
Avatar for moznion moznion
0
110
AI活用の現在地、 ちゃんと見えてますか？/XPfest-2026
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
0
160
【視聴者参加型！】AWSセキュリティアンチパターンクイズ
Avatar for Shun Yoshie syoshie
0
450
IoTハンズオンの舞台裏
Avatar for Yuji Shirai shirouz
2
160
AIエージェントの開発・提供におけるセキュリティリスクの論点と対策
Avatar for GMO Flatt Security flatt_security
2
600
Jetpack Compose で挑む新聞紙面UI ─ 複合ジェスチャー・ポリゴン記事領域・適応的ページ構成という3つの壁/droidkaigi2026
Avatar for 日本経済新聞社 エンジニア採用事務局 nikkei_engineer_recruiting
0
240

Featured

See All Featured
Future Trends and Review - Lecture 12 - Web Technologies (1019888BNR)
Avatar for Beat Signer signer
PRO
0
3.7k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
510
Marketing Yourself as an Engineer | Alaka | Gurzu
Avatar for Gurzu gurzu
0
290
エンジニアに許された特別な時間の終わり
Avatar for watany watany
108
250k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
4.7k
Between Models and Reality
Avatar for mayunak mayunak
4
450
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.8k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
55
13k
A Soul's Torment
Avatar for Nat Ma seathinner
7
3.6k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
46
3k
Building an army of robots
Avatar for Kyle Neath kneath
306
46k
Information Architects: The Missing Link in Design Systems
Avatar for Michelle Chin soysaucechin
1
1.1k

Transcript

  1. 1 NICOLAS BYL DEVSECOPS VOM UNIKUM ZUR GUT GEÖLTEN MASCHINE

  2. 2 INTRODUCTION

  3. 3 THE DEVSECOPS CYCLE

  4. 4 THE CASTLE ILLUSION

  5. 5 THE DEVSECOPS CYCLE

  6. 6 THE DEVSECOPS CYCLE

  7. 7 SECURE ARCHITECTURE

  8. 8 THREAT MODELLING

  9. 9 COMPLIANCE

  10. 10 PENTESTS

  11. 11 THE DEVSECOPS CYCLE

  12. 12 DESIGN PATTERNS

  13. 13 PRE-COMMIT HOOKS

  14. 14 CODE REVIEWS

  15. 15 COMMIT SIGNING

  16. 16 THE DEVSECOPS CYCLE

  17. 17 THE DEPENDENCY ICEBERG

  18. 18 AUTOMATION IS KING SOURCE CODE ANALYSIS • FindBugs •

    SonarQube • SAST • DAST SOURCE CODE ANALYSIS DEPENDENCY ANALYSIS • Maven, npm, ... • Container Images • Operating System Packages UPDATE AUTOMATION • npm audit • Dependabot • Renovate

  19. 19 THE DEVSECOPS CYCLE

  20. 20 POLICY OVER CHECKLISTS

  21. 21 THE KEY TO THE KINGDOM

  22. 22 ZERO-TRUST DEPLOYMENT

  23. 23 ROLLER COASTER PASSWORDS

  24. 24 INVENTORY SCANS

  25. 25 FIRE DRILLS & CHAOS ENGINEERING

  26. 26 HOW TO GET IN TOUCH [email protected] @ClusterBauer https://www.nexineer.io/career/ WE

    ARE ALWAYS LOOKING FOR GREAT COLLEAGUES…

  27. 27 PATCHING Sicheres Artefakt Artefakt mit bekannter Schwachstelle Scanning Patching