CI/CDDASTDevOpsDevSecOpsIASTSAST What the heck is IAST? May 21, 2019 by Dana Raveh The application security testing (AST) world is made up of different solutions, all with one ultimate goal – to protect software from hackers, and their attacks. SAST and DAST are perhaps the two most common and well-known solutions. In the last few years, a newcomer has gradually received more-and-more attention – IAST. So what is Read More › CI/CDDASTDevOpsDevSecOpsIASTSAST
continuous integrationDevOpsDevSecOpsIASTSAST SAST & IAST – The Power Couple in the DevSecOps Era May 8, 2019 by Dana Raveh DevSecOps has become one of the hottest buzzwords in the DevOps and security ecosystem over the past couple of years. But what is it, and how do you turn it into reality? DevSecOps executes on the belief that security and development teams are jointly responsible for bolstering security – essentially bringing development and operations Read More › continuous integrationDevOpsDevSecOpsIASTSAST
CIOCISODevOpsDevSecOpsOpen SAMMOWASPSAMMSecure SDLCsecurity maturitySoftware Assurance Maturity ModelsSDLC Learn How You Can Get a Running Start with DevSecOps Feb 18, 2019 by Matthew Rose DevOps is an evolving philosophy, and now is the time–just as you start embracing DevOps in your organization–to start building security into both your DevOps philosophy and processes. DevOps philosophy started with the core principles of W. Edwards Deming’s points on Quality Management, binding the development of services and their delivery to IT Operations. As Read More › CIOCISODevOpsDevSecOpsOpen SAMMOWASPSAMMSecure SDLCsecurity maturitySoftware Assurance Maturity ModelsSDLC
agile developmentApplication Security TestingDeveloper EducationDevOpsDevOps cultureDevSecOpsGartner Magic Quadrantsecurity Shifting to DevSecOps, with Software Security Testing Built In Jan 15, 2019 by Matthew Rose Many organizations today are in the process of transitioning to a DevOps-centric approach, but don’t want to leave security behind. In order to build security in from the beginning of their software development process, it’s essential to enhance your security posture by integrating application security testing solutions into the software development life cycle at your Read More › agile developmentApplication Security TestingDeveloper EducationDevOpsDevOps cultureDevSecOpsGartner Magic Quadrantsecurity
Application SecurityDevOpssoftware security Why Security and DevOps Desperately Need Couples Counseling Aug 26, 2018 by David Spark While at the 2018 Black Hat Conference in Las Vegas I asked attendees point blank if they think that security and DevOps should be in couples counseling. The universal response was a laugh and then a resounding, “Yes.” The reason couples go to couples counseling is because they’re not getting along. They’re not communicating. Usually, only Read More › Application SecurityDevOpssoftware security
DevOpsDevSecOps Why Your Enterprise Needs DevOps Jun 12, 2017 by Sarah Vonnegut The buzzword of the decade is far from just a trend as organizations struggle to keep up with competition. There’s a reason DevOps is so often discussed and highly regarded. As organization after organization makes the switch and reaps the rewards offered by the DevOps culture, it’s time for all those who could enjoy DevOps Read More › DevOpsDevSecOps