This summary is talking about the Book "Practical Security for Agile and DevOps".

This text comes from the book "Practical Security for Agile and DevOps" by Mark S. Merkow. It is a guide for software developers and security professionals on how to integrate security into the software development lifecycle (SDLC), particularly within Agile and DevOps environments. The text focuses on the principles of "Shift Left," which emphasizes incorporating security considerations early in the development process, and "Build Security In," which promotes designing and developing software with security in mind from the start. The book explores various methods for achieving secure software, including threat modeling, static code analysis, dynamic code analysis, and penetration testing. It also examines the impact of modern development trends like microservices, APIs, and containers on application security. Finally, the text discusses tools and resources for appsec professionals, including maturity models like OpenSAMM and BSIMM, and certification programs like the CSSLP.

You can listen and download our episodes for free on more than 10 different platforms:
[ Ссылка ]

Get the Book now from Amazon:
[ Ссылка ]

свернуть