What is DevSecOps? Developing more secure applications

Source – itworld.com The simple premise of DevSecOps is that everyone in the software development life cycle is responsible for security, in essence bringing operations and development together with security functions. DevSecOps aims to embed security in every part of the development process. It is about trying to automate core security tasks by embedding security controls and processes early in the DevOps workflow (rather than being bolted on at the end). For example, this could be the case when migrating to

Read more

Qualys: How to be cool with DevOps

Source – computerweekly.com Well, it was only meant to be an open question, a hypothesising supposition, a point of informed speculation that might lead to an informal pub discussion at best. But, as is often the way with these things, the industry has taken it as a clarion call for commentary and deeper analysis… and who are we to turn down the opportunity for deeper inspection of the DevOps state of the nation? First among a small group of spokespeople invited

Read more

5 reasons DevOps will be a big deal in the year ahead

Source – infosurhoy.com The typical enterprise has become a nonstop software and data factory, operating 24Ă—7. Technology has to be there at all times. DevOps has been a hot topic and pursuit for a few years now. During this time, many enterprises have been attempting to put this way of working — in which development output is aligned with ongoing business requirements — in place in one form or another. But 2018 promises to be the year when it all really

Read more

The future of DevOps: What to expect for 2018

Source – itproportal.com This year we have witnessed more industries adopting the set of practices and solutions that make up DevOps. According to a Capgemini report, 60% of companies have adopted DevOps or plan to do so in the next year. This demonstrates how widely understood it is for DevOps to be a necessary part of your business strategy if you intend to quickly respond to market demands, keep your software and solutions regularly updated, and improve time-to-market within your business.

Read more

On cybersecurity and IT teams of the future, we’ll all be SREs

Source – csoonline.com Devops is perhaps the most important innovation in the IT and security sectors since the invention of the personal computer. The philosophy is so foreign though, compared to what IT and security staffs have traditionally done, that many do not understand the implications. It is tough for them, and their management chains, to fully wrap their heads around the potential impact to their organizations in the future. However, now is the time to embrace the idea not just

Read more

Source – sdtimes.com DevOps continued to dominate development teams and businesses throughout the year with organizations trying to reap the benefits. A Logz.io study found that despite DevOps being a well-known phenomenon, 50 percent of respondents are still in the process of implementing DevOps or have just implemented it within the past year. In the past year, many software companies teamed with or acquired others to broaden their DevOps solutions. CA acquired Veracode in the beginning of the year to help

Read more

Incorporating security is the next step in the evolution of DevOps

Source – techtarget.com DevOps has been a staple at Actifio Inc. since its founding in 2009. But much like the evolution of DevOps has continued throughout the past eight years, so has the tech company’s version of it. In fact, Actifio has moved into the next iteration: DevSecOps. The company has shifted security testing to a much earlier stage in product development, said Actifio CSO John A. Meyers. It also increased automation and gave developers, solution architects and product managers access

Read more

Predictions 2018: How DevOps, AI Will Impact Security

Source – eweek.com DevOps and agile development, new-generation processes and techniques that work hand in hand in developing, testing and distributing software of all types, have been in the IT business news continually for about the last half-dozen years. And there are good reasons why. We at eWEEK are constantly being pitched by thought leaders with new ideas about this relative sea change in the business, in addition to companies with new or improved tools that facilitate the automation that’s inherent

Read more

Why container tech is the backbone of DevOps

Source – itpro.co.uk Containerisation is one of the most exciting tech trends to emerge over the last few years. Designed to work at operating system level, it’s a popular virtualisation method that allows IT professionals to deploy and distribute applications easily. This form of application management, which is named after shipping containers, allows almost any application to be stored and transported quickly. Containers, which are simply encapsulated systems, are given their own environments and hosts to run on. This process strips the

Read more

Common sense DevSecOps tips for developers

Source – jaxenter.com DevSecOps might be the latest in a long line of tech buzzwords, but it’s actually a fairly practical way at promoting secure tech practices while uniting different spheres of production and operations. But getting into a DevSecOps mindset requires serious collaboration to change processes and tech for the better. As DevSecOps is rapidly becoming the preferred approach for organizations, it becomes even more important to take a moment and make sure everything is heading in the right directions.

Read more

DevOps the forgotten team when it comes to security: CyberArk

Source – zdnet.com Due to the dynamic nature of DevOps and the business “secrets” they have access to, security vendor CyberArk has highlighted the importance of ensuring these teams are protected from the threat landscape. According to Jeffrey Kok, senior director of solution engineering for Asia Pacific and Japan at CyberArk, exposing DevOps to the elements means privileged account credentials — such as SSH keys, API keys, and other credentials — are proliferating throughout IT infrastructure at a rapid-fire pace, creating

Read more

DevOps Success Beyond Agile: Cloud Expo Power Panel

Source – forbes.com The venerable Cloud Expo conference may be a mere shadow of its former self, but it still has its moments. One high point: a powerful panel of technology experts debating the ins and outs of DevOps. The most refreshing insight: while DevOps is an important trend, there is no magic here. It’s difficult work, and we’ve built it on hard-earned lessons of the past. “DevOps is something we’ve done under different monikers for many, many years,” explained Tracy

Read more

Can DevOps Simplify the Operational Risk of Compliance?

Source – afcea.org Today, government agency leaders have been tasked to identify and follow multiple modernization initiatives with the possibility of driving private-sector customizations and delivery practices and the associated business efficiencies into the public sector. The impetus is coming from a variety of directions, including the Office of American Innovation;, the adoption of development operations (DevOps) and development security operations (DevSecOps) as a cyber protection strategy;, the emphasis by the Federal Trade Commission on unfair or deceptive practices;, and a

Read more

How Cloud Companies Can Move from Agile to DevOps

Source – talkincloud.com To move from agile to DevOps methodology requires new consideration of deployment and hosting infrastructure. How can cloud companies best address these concerns? Best practices and key advice for progressive IT teams at managed service providers (MSPs) can help the move from agile to DevOps. To transition the move from agile to DevOps, the structure should be adapted for developers who have been using agile for a while. Fortunately, agile and DevOps are not necessarily methodologies at odds, according to

Read more

DevSecOps is important and here is why

Source – appdevelopermagazine.com In the digital age, securing your development projects against malicious hackers can be quite the challenge. And when you take security and try to scale security to an enterprise, the challenge seems insurmountable. Evident by the frequent hacking incidents we see come through the news. Enter DevSecOps. DevSecOps is a methodology that interweaves the aspects of DevOps and standard security practices. It attempts to prevent vulnerabilities that can occur at every step of the development process, and so,

Read more

Rethinking DevOps as DevSecOps

Source – appdevelopermagazine.com If you’re not already thinking right now that your DevOps teams should be run like a DevSecOps team, you may already be in a world of hurt. Time to wake up! As the adoption of APIs continues to grow, so do the risks to organizations that don’t actively test the security of their solutions. Modern Agile development frameworks have changed the way engineering teams produce products. Under these frameworks, products receive small, frequent updates daily or weekly rather

Read more

The importance of DevOps in digital transformation

Source – networksasia.net In this digital age, enterprises are automating IT infrastructure and instituting DevOps methodologies to accelerate the pace of innovation. However, traditional identity and access management solutions are not designed to support the security needs of DevOps workflows. Organisations need new systems and practices to support dynamic workloads, microservices and automated IT without compromising security or service velocity. Thus, DevSecOps was born, where security is designed and in built throughout the DevOps pipeline and multi-cloud environment. “Organisations that have

Read more

DevOps and SecOps began as separate efforts

Source – csoonline.com Until today, anti-fraud, security and authentication activities in organizations have operated as largely-separate domains, with IT Ops even more separated, in most cases. This is due, in part, to the “silo mentality” in enterprises, where it’s more convenient to have a bunch of teams running their own disciplines. After all, collaboration and synchronization increase the degree of difficulty. Politics, momentum, status quo, and decentralized operations that use third-party providers are also contributing to the current operational division. Given

Read more

Treating Shared Databases Like APIs in a DevOps World

Source – infoq.com Simon Sabin, Principle Consultant at Sabin.io, spoke at WinOps 2017 conference on how to include database changes in a continuous deployment model. A key aspect when sharing databases across multiple services or applications is to treat them as APIs, from the perspective of the database owners. Sabin suggested that mechanisms such as views, triggers and stored procedures can be used to change the database internal structure while keeping backwards compatibility with the applications data operations. He gave the example of migrating

Read more

DevOps evolves into DevSecOps

Source – devopsonline.co.uk According to Computer Weekly, DevOps is evolving into DevSecOps, and new tools are needed to automate IT policy management. In Sentinel, one tool emerged, including an option with enterprise versions of HashiCorp DevOps tools, such as: Consul for service discovery Vault for secrets management Nomad for container scheduling Terraform for infrastructure as code Sentinel offers policy as code features for both security and compliance and HashiCorp seeks to attract DevOps pros, to provide data analytics and financial services to

Read more
1 10 11 12 13 14 15