Hands-On Security in DevOps

DevSecOps for the testing team

Q: What testing tools are suggested for data privacy assessment?

Data life cycle	Testing key points	Suggested testing tools
Transmission of data	Ensure that the sensitive information is not transmitted by GET The secure communication protocol, such as TLS v1.2, SSH V2, SFTP, SNMP V3	SSLyze, NMAP, Wireshark
Storage of data	Check whether sensitive information is encrypted Check that the permissions of the files are properly configured	TruffleHog: https://github.com/dxa4481/truffleHog
Encryption of data	No uses of weak encryption algorithms, such as MD5, RC4, Jackfish, and Tripple DES	Code-scanning tools: https://github.com/floyd-fuh/crass/blob/master/grep-it.sh
Data access ...