November 10 – 12, 2020

Online Edition!

Security Tooling in Your DevOps Pipeline

Nancy Gariché

Where in the pipeline and when security assessments are prescribed

Open-source and commercial tools that can help perform these assessments

How these testing and automation efforts can greatly help your compliance efforts

EUROPE'S GREATEST AGILE SOFTWARE TESTING FESTIVAL!

Security Tooling in Your DevOps Pipeline

Manual security assessments have become a bottleneck or have been ignored and left for the end of the SDLC. New ideas are needed to integrate security assessments into agile development practices.

In this quest to be first to market, DevOps has been a strategy of choice to improve agility in development teams. As these teams push code to production faster and faster, slow and manual security assessments need to be replaced with new ways for application security assessments. We’ll learn about dealing with security considerations with demos of tools and integrations in action.

During this talk, we will explore how we can use tooling and automation to include security early on and throughout a continuous integration/continuous delivery (CI/CD) pipeline. Scanning the platform for vulnerabilities and the code for 3rd-party components with known vulnerabilities, using static code analysis and performing dynamic security testing are some of the strategies we will use to ensure that security can catch up and keep up with the speed of DevOps.


More Related Sessions


30-minute Talk

11:10 a.m. – 11:50 a.m.

30-minute Talk

11:10 a.m. – 11:50 a.m.

150-min Workshop

No Recording
2:50 p.m. – 5:20 p.m. Equipment required

If you like AgileTD you might also be interested in :

Your privacy matters

We use cookies to understand how you use our site and to give you the best experience on our website. If you continue to use this site we will assume that you are happy with it and accept our use of cookies, Privacy Policy and Terms of Use.