InfoQ Homepage DevSecOps Content on InfoQ

Articles

RSS Feed

Newer Older

DevOps

The Role of DevOps in Cloud Security Management

Different areas of cloud security must be examined to strengthen security in the cloud versus security of the cloud. This includes identifying requirements, defining the architecture, analyzing controls, and identifying gaps. Security must be both proactive and reactive, so it needs to be considered in every step of development.

Dotan Nahum
on Apr 22, 2022
Mobile

Mobile DevSecOps Is the Road to Mobile Security

In this article, I’ll discuss some of the most common security deficiencies in mobile apps and explain the potential risks to consumers, app developers, and brands, as well how to break the cycle of poor app security, using automated, rapid, continuous, and iterative deployment.

Alan Bavosa
on Oct 13, 2021
DevOps

Virtual Panel: DevSecOps and Shifting Security Left

Recent attacks, that targeted SolarWinds, Colonial Pipeline, and others, have shown that development environments come ever more frequently on the radar of malicious actors. A virtual panel on the value of shifting left security, how to take responsibility for it, and the time-to-market pitfalls.

Brian Fox Jyoti Bansal Kevin Bocek Sergio De Simone
on Oct 01, 2021
DevOps

DevSecOps: the Key to Securing Your Supply Chain in a Multi-Cloud Threatscape

Recent supply chain attacks require businesses to re-evaluate their approach to DevOps, specifically as it relates to security. The DevSecOps focus CI/CD platforms, testing and scanning across the SDLC, and a focus on minimizing manual efforts can not only improve security postures but also improve delivery of business value.

Johnathan Hunt
on Jul 22, 2021
DevOps

DevOps and Cloud InfoQ Trends Report - July 2021

This article summarizes how we see the "cloud computing and DevOps" space in 2021, which focuses on fundamental infrastructure and operational patterns, the realization of patterns in technology frameworks, and the design processes and skills that a software architect or engineer must cultivate.

Matt Campbell Steef-Jan Wiggers Shaaron A Alvares Helen Beal Daniel Bryant Lena Hall Rupert Field Aditya Kulkarni Jared Ruckle Renato Losio Holly Cummins
on Jul 19, 2021
DevOps

Danske Bank’s 360° DevSecOps Evolution at a Glance

This article provides an overview of the ongoing DevSecOps evolution at Danske Bank, positioned within the broader transformation that the firm is performing. The main enablers and motivating factors of the evolution are outlined, with challenges discovered. The high level overview of the DevSecOps operating model, together with anti-patterns discovered and main lessons learned concludes it.

Spyridon Maniotis
on Jun 24, 2021
DevOps

Q&A with Eveline Oerhlich on Building an Effective DevOps Culture

The DevOps Institute recently released their latest report entitled "Upskilling 2021: Enterprise DevOps Skills Report". The report found that automation and security remain vital to business success. A focus on building the human skills of DevOps was also identified as companies with the best learning cultures were most likely to succeed.

Matt Campbell Eveline Oerhlich
on May 25, 2021
Development

InfoQ Editors' Recommended Talks from 2019

As part of the 2019 end-of-year-summary content, this article collects together a list of recommended presentation recordings from the InfoQ editorial team.

Charles Humble Ben Linders Arthur Casals Manuel Pais Erik Costlow Shane Hastie Shaaron A Alvares Srini Penchikala Michael Redlich Steef-Jan Wiggers Daniel Bryant
on Dec 06, 2019
Cloud

Improving Security Practices in the Cloud Age: Q&A With Christopher Gerg

IT leaders say that security is a top priority. Surveys show that it’s easy to say, and hard to do. InfoQ spoke with Christopher Gerg, CISO at Gillware, about security practices in the cloud age.

Richard Seroter
on Oct 05, 2019