Tag

secdevops

23 articles

Latest in secdevops

Cycloid, stacks, workflows. DevOps, transformation, workflow Automation Apache Hop

Blogs

7 Step Transformation Blueprint for SecDevOps

The struggle for continuous software security is obvious, but the solutions are not. As I indicated in my prior blog, SecDevOps is the Solution to Cybersecurity, a security-first mindset, coupled with SecDevOps-specific practices,…

May 28, 20213 min

All secdevops Articles

Showing 1–23 of 23

May12

Blogs

SecDevOps is the Solution to Cybersecurity

Anybody paying attention to world news will notice that the threats and risks perpetrated by cybercriminal actors, in many forms, is a serious problem on the rise, affecting indivi…

3 min

Nov15

Blogs

Are We Leaving Developers Out of DevOps Spinoffs?

SecOps. DataOps. NetOps. Reading these terms, you get the sense that the key to IT efficiency is to make IT Ops work with everyone else. But that’s a mistake, because it leaves dev…

3 min

Feb29

Blogs

Murphy’s DevOps: Is Security Causing Things to Go Wrong?

“Rugged DevOps,” “DevSecOps”—am I missing any? About the only thing more abundant than the volume of terms emerging to describe different facets of how security supports DevOps are…

3 min

Feb19

Blogs

Flash Mob Inflection: Rugged DevOps Revolution

Truthfully, I was never a huge fan of the HBO series “The Sopranos.” It’s not that it wasn’t entertaining; I just didn’t agree with the “best ever” label that so many espoused duri…

3 min

Jul08

Blogs

Security Breaks DevOps – Here’s How to Fix It

The concepts of communication, collaboration, abstraction, automation and orchestration are cornerstones of the rapidly growing DevOps movement. At the same time reliance on virtua…

3 min

May28

Blogs

The devOpsSec Dilemma: Effective Strategies for Social Networking

I was sad to hear of the passing of John Nash and his wife Alicia this weekend. May they rest in peace. As a game theorist I am familiar with his work and it just so happens that N…

3 min

May18

Blogs

It’s time security pros shake their DevOps fear, uncertainly, and doubt

There’s been considerable discussion recently about how to make certain good security practices remain integrated within DevOps-driven environments. To get the scoop from a securit…

3 min

Apr16

Blogs

DevOps Security Talks At RSA USA 2015 Conference

DevOps and security. Its a muddled mix of waters made even more confusing by the wet ink still on the concept of DevOps. There is no denying the popularity of DevOps and there is a…

3 min

Apr13

Blogs

Complete speakers & schedule for DevOps Connect: SecDevOps @RSAC

The line up for DevOps Connect: SecDevOps @ RSAC is complete. What a great job Gene Kim and Josh Corman did lining up a power-packed schedule. Here is what the day is shaping up to…

3 min

Apr06

Blogs

Automated Security Testing in a Continuous Delivery Pipeline

Automated unit, integration and acceptance tests are essential quality controls in running a reliable continuous integration or continuous delivery pipeline. Too often, security te…

3 min

Apr02

Containers

Containers: Secure or Not, Here They Are

Containers are here. And it doesn’t mater whether or not containers are a transitional technology (they are, as our JP Morgenthal covered in Containers are designed for an antiquat…

3 min

Mar21

Blogs

Rugged DevOps Breakfast @RSAC

In April devopsy.kinsta.cloud will highlight the intersection of DevOps and Security. We will be hosting DevOps Connect: SecDevOps @ RSA Conference on Monday, April 20 with Gene Ki…

3 min

Mar19

Blogs

DevOps Connect: SecDevOps, how to register if you already registered for RSA Conference

Several people have written asking us how to pre-register for the DevOps Connect: SecDevOps conference on the Monday of RSA Week at the Moscone Center. All registrations are handle…

3 min

Feb24

Features

DevOps & Continuous Change

A remark by a colleague while waiting for the coffee machine to complete its cycle started my train of thought. “Should we have multiple minor releases or just do a few major ones…

3 min

Jan22

Blogs

Security Should Be the Top Driver for DevOps

I’ve often said that the driving factor for many companies in adopting a comprehensive information security program are the dreaded “F” and “A” words – FUD and Audit. Technically F…

3 min

Oct01

Blogs

Moving Security To the Left In a DevOps World

Moving security to the left has become a coined phrase meant to describe the process of getting the security team involved earlier in a process. Most typically, the phrase is used…

3 min

Jun30

Features

Q&A with Gene Kim: Bringing the auditors to DevOps

As more enterprises embrace DevOps, organizational disconnects often are created between what controls DevOps teams have in place and what IT controls auditors believe need to be i…

3 min

Jun05

Blogs

SecDevOps: the new black of IT

Much has been written about the role of Security in a DevOps culture. Almost universally the thought is that DevOps can help improve security. Why? How? Really? An old friend of mi…

3 min

May21

Blogs

Deputizing Everyone for Security – Building Agile Assurance

Those of us highly focused on the delivery pipeline of DevOps will wonder why we should include the security guy to the party. After all, aren’t they just going to slow down the pr…

3 min

May07

Blogs

Security automation with DevOps: show me the code!

Last week Andrew Storms put up a good post hinting at the promise of security automation in [SecDevOps: Security Automation By Example – The Firewall Change]. He included an exampl…

3 min

Apr30

Blogs

SecDevOps: Security Automation By Example – The Firewall Change

Security Automation By Example The Firewall Change Just when you thought DevOps was the new black, along comes SecDevOps. Yes folks, like most things in life, the new cool is alrea…

3 min

Apr09

Blogs

Using AWS CloudWatch for Anomaly Detection

Based on my unscientific poll of friends, one of the least used and most overlooked features of AWS is CloudWatch. Not only can CloudWatch be used to monitor the availability of yo…

3 min