WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 12, 2020

DevSecOps: Security in DevOps

Aarno Aukia

Integrating security into your CI pipeline transforms final-stage gatekeepers into proactive guardrails. Automate governance to ship secure, compliant code without sacrificing engineering velocity.

Pause
Mute Enter Fullscreen
#1 about 4 min

Evolution from waterfall to agile and DevOps

How software development methodologies shifted from reactive waterfall and agile models to proactive DevOps practices.

#2 about 3 min

Shifting security left using the DevSecOps approach

Why security must be integrated as early non-functional requirements rather than a final gatekeeping step.

#3 about 1 min

Defining application, pipeline, and security operations roles

Breaking down the security journey into application security, pipeline deployment security, and incident response operations.

#4 about 4 min

Core principles for implementing DevSecOps in teams

Essential concepts including team transparency, incremental risk management, supply chain governance, and automated audit trails.

#5 about 3 min

Integrating automated security tooling into build pipelines

How to automate static code analysis, dependency tracking, and container baseline scanning for faster validation.

#6 about 3 min

Eliminating operational errors with containerized application deployments

Using containerization and atomic rollbacks to enforce immutable infrastructure and remove manual production access.

#7 about 4 min

Abstracting infrastructure complexity with container orchestration platforms

Leveraging Kubernetes to handle service discovery and standardize operational abstraction across on-premise and cloud hardware.

#8 about 5 min

Utilizing pre-integrated observability and authentication platform tools

Plugging into the Kubernetes ecosystem to standardize container logging, metrics, TLS certificates, and centralized authentication.

#9 about 6 min

Implementing automated DevSecOps governance in banking software

How Enova uses platform abstraction and business process frameworks to automate deployment approvals under strict regulatory constraints.

#10 about 4 min

Replacing full-stack audits with cloud-native iterative governance

Reducing auditing scopes by validating underlying container platforms once and preventing configuration drift via declarative deployments.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

3:15 min

Integrating security and financial disciplines into DevOps models

Holly Cummins · LIVE

1:20 min

Integrating security into the DevOps lifecycle

Reto Kaeser · LIVE

2:57 min

Securing team and management buy-in for DevSecOps adoption

Moataz Nabil Moataz Nabil · LIVE

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

2:34 min

Transitioning team culture from standard DevOps to DevSecOps

Moataz Nabil Moataz Nabil · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
11 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
18 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
20 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
25 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
27 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
about 1 month ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Demystifying DevOps—Pros, cons, dos & don'ts thumbnail
51:13
LIVE • almost 5 years ago

Demystifying DevOps—Pros, cons, dos & don'ts

Thomas Fuchs, Waleed Arshad, Frank Dornberger, Idir Ouhab Meskine

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

DevSecOps: Injecting Security into Mobile CI/CD Pipelines thumbnail
45:08
LIVE • almost 5 years ago

DevSecOps: Injecting Security into Mobile CI/CD Pipelines

Moataz Nabil

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Enabling automated 1-click customer deployments with built-in quality and security thumbnail
44:40
LIVE • almost 6 years ago

Enabling automated 1-click customer deployments with built-in quality and security

Christoph Ruggenthaler

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.