Tag: DevSecOps

DevOps Leave a comment

Trend Micro Advances DevSecOps via Kubernetes Integration

Source:- containerjournal.com. Trend Micro is now making it possible to employ Kubernetes to orchestrate security scans of container images conducted by Trend Micro Deep Security, its suite of tools that rely on deep packet inspection to protect applications using a combination of firewalls, intrusion protection systems and monitoring of logs and files. Mark Nunnikhoven, vice president of cloud research for Trend Micro, says these capabilities make it possible to embed container image scanning within a DevOps pipeline at scale while simultaneously inspecting

Read more
DevOps Leave a comment

When DevOps Isn’t Enough

Source- cso.com.au The DevOps approach can accomplish many things, but can it help make your business more cyber secure? I don’t believe so. In fact, the notion of “DevSecOps”—making its way to an IT buzzword bingo card near you—could, in fact, jeopardise informational security across the organisational surface. The best way to boost security is to build a central team responsible for baking it into the development process from start to finish. More than just an attitude DevOps brings various strengths

Read more
DevOps Leave a comment

The future of open source and DevOps.

Source- jaxenter.com Only a few short years ago, organizations considered open source to be a high risk. These days, enterprises and governments alike are embracing open source and placing it at the center of their software development stacks. IBM’s recent acquisition of Red Hat and Microsoft’s acquisition of GitHub, which is the home of many open source projects, show that open source has won the hearts and minds of the general populace. In fact, if you’re not already using open source,

Read more
DevOps Leave a comment

What Happens When You Add Security to DevOps? DevSecOps

Source- informationweek.com I’ve gone head-first into the world of DevOps, and, it’s been an amazing ride. I’ve had many of my own misconceptions blown away after learning the deep culture and philosophy behind DevOps. That and surrounding myself with people who actually implement the concepts of DevOps have been absolutely enlightening as well. If you still need a primer check out my DevOps 101 article for a bit more detail. Otherwise, just remember that DevOps isn’t just two words combined together. DevOps is

Read more
Continuous Delivery Leave a comment

9 Pillars of Continuous Security Best Practices

Source- devops.com Without proper consideration given to security best practices, the continuous delivery of software changes facilitated by DevOps is risky. On the other hand, DevOps provides an opportunity to reduce security risks if security is integrated into the continuous delivery pipeline according to best practices. This blog enumerates best practices for security across nine pillars of DevOps: Leadership, Collaborative Culture, Design for DevOps, Continuous Integration, Continuous Testing, Continuous Monitoring, Elastic Infrastructure, Continuous Delivery/Deployment and Continuous Security. Examples of best practices

Read more
DevOps Leave a comment

Devops predictions for 2019

Source- computerworlduk.com Devops thinking is arguably mainstream today, and there were plenty of developments afoot in 2018 that suggest 2019 will be an intriguing year to follow the space. Loosely defined, devops is the combination of developer and operations teams through an organisational culture change, assisted by automation tooling with the goal of releasing software as quickly as possible. Naturally this makes it an enticing proposition to enterprises, especially those who may be at the start of their “digital transformation”, even

Read more
Cloud Computing Leave a comment

6 Cloud Security Predictions for 2019

Source- darkreading.com In 2018, more organizations adopted cloud computing, and at a rapidly growing pace. The main drivers for cloud were high efficiency, easier and faster deployments, and, of course, scalability. But from a security perspective, the speedy adoption of cloud computing is forcing security professionals to learn about new challenges, cloud-specific risks, and relevant mitigations as well as to develop more modern cybersecurity strategies. The past year also brought with it a greater number of security incidents related to misconfigured

Read more
DevOps Leave a comment

Already learned DevOps? Great, now it’s time for GitOps

Source- thenextweb.com You’ve seen DevOps, and DevSecOps, and maybe even NoOps. But if you haven’t already, you’re going be hearing a whole lot more about GitOps. As an indicator, four of the sessions at the upcoming KubeCon are about GitOps. You might not know what GitOps is, but if you’re developing software, there’s a good chance you’re already doing it. What’s GitOps? And do we really need another software development buzzword? Well, GitOps is really the culmination of a few different

Read more
DevOps Leave a comment

9 Must-Have Tools To Make DevOps Much Easier

Source- nerdsmagazine.com The concept of DevOps is increasingly becoming popular in the technological sphere. Basically, it is the process which aims at the unification of development and operations to allow a custom software development company to deliver high-quality solutions faster. But DevOps is much more than merely purchasing a new set of tools. It’s all about undergoing a true cultural transformation. However, to be successful with DevOps, you need to invest some money in acquiring a few new software. These tools help the

Read more
DevOps Leave a comment

3 Tips to Build A DevSecOps Organization

Source- devops.com For organizations undergoing digital transformation today, modernizing the existing environment can present serious challenges when it comes to security. Whether you’re dealing with a transition from legacy to cloud or hybrid models, or shifting from ITIL and waterfall methodologies to DevOps, the increasing number of technologies and complexity mean you need to rethink your security posture. The traditional approach to security—that is, a static strategy that largely involves patching on piecemeal measures at the 11th hour—is simply not a

Read more
1 2 3 … 13