InfoQ Homepage DevSecOps Content on InfoQ

Articles

RSS Feed

Newer Older

DevOps

When DevOps Meets Security to Protect Software

Security can no longer be an afterthought in the software development process. Collaboration between security and development needs to happen early to be effective.

Franklyne Omondi
on Apr 03, 2023
DevOps

Accelerating the Secure Software Delivery Lifecycle with GitOps

Building secure software can be complicated and time-consuming. By employing a GitOps model, security can be safely separated from development, simplifying the delivery process and increasing velocity.

Gopinath Rebala
on Mar 27, 2023
DevOps

API Security: from Defense-in-Depth (DiD) to Zero Trust

Nearly all companies have experienced security incidents but few have an API security policy that includes dedicated API testing and protection. A defense-in-depth approach that includes boundary defense, observability, and authentication is recommended.

Ming Wen
on Nov 30, 2022
DevOps

Successfully Integrating Dynamic Security Testing into Your CI/CD Pipeline

Dynamic security testing tools don’t require advanced cybersecurity knowledge to operate. Integrating DAST into your CI/CD pipeline should be done in stages by focusing on the riskiest areas first.

Akira Brand
on Oct 21, 2022
DevOps

What Developers Must Know about Zero Trust

Zero trust solves the problem of open network access by allowing access only to the resources a user should be allowed to access. This article covers how to start working with zero trust principles and ideas.

Gilad David Maayan
on Aug 04, 2022
DevOps

Using DevOps Automation to Combat DevOps Workforce Shortages

A focus on automation can help to combat the current staffing struggles many organizations have with DevOps roles. Effective automation can reduce the toil experienced by developers. Automation efforts should focus on security operations, deployments, continuous delivery, QA testing, and continuous integration.

Cody Littlewood
on Jul 13, 2022
DevOps

DevOps and Cloud InfoQ Trends Report – June 2022

This article summarizes how we see the "cloud computing and DevOps" space in 2022, which focuses on fundamental infrastructure and operational patterns, the realization of patterns in technology frameworks, and the design processes and skills that a software architect or engineer must cultivate.

Steef-Jan Wiggers Matt Campbell Lena Hall Renato Losio Daniel Bryant Feynman Zhou Mostafa Radwan Shaaron A Alvares
on Jun 21, 2022 3
DevOps

Evolving DevSecOps to Include Policy Management

A thorough implementation of policy management tools is required for effective compliance and security management in a DevOps environment. Companies that accept policy management in DevSecOps as a way of development and have adopted some level of policy management best practices tend to operate more efficiently.

Ritesh Patel
on May 26, 2022
DevOps

The Role of DevOps in Cloud Security Management

Different areas of cloud security must be examined to strengthen security in the cloud versus security of the cloud. This includes identifying requirements, defining the architecture, analyzing controls, and identifying gaps. Security must be both proactive and reactive, so it needs to be considered in every step of development.

Dotan Nahum
on Apr 22, 2022
Mobile

Mobile DevSecOps Is the Road to Mobile Security

In this article, I’ll discuss some of the most common security deficiencies in mobile apps and explain the potential risks to consumers, app developers, and brands, as well how to break the cycle of poor app security, using automated, rapid, continuous, and iterative deployment.

Alan Bavosa
on Oct 13, 2021
DevOps

Virtual Panel: DevSecOps and Shifting Security Left

Recent attacks, that targeted SolarWinds, Colonial Pipeline, and others, have shown that development environments come ever more frequently on the radar of malicious actors. A virtual panel on the value of shifting left security, how to take responsibility for it, and the time-to-market pitfalls.

Brian Fox Jyoti Bansal Kevin Bocek Sergio De Simone
on Oct 01, 2021
DevOps

DevSecOps: the Key to Securing Your Supply Chain in a Multi-Cloud Threatscape

Recent supply chain attacks require businesses to re-evaluate their approach to DevOps, specifically as it relates to security. The DevSecOps focus CI/CD platforms, testing and scanning across the SDLC, and a focus on minimizing manual efforts can not only improve security postures but also improve delivery of business value.

Johnathan Hunt
on Jul 22, 2021